CVE-2024 list

CVE-2024 records published in June 2024

Page two of three: records 1,001 to 2,000 of the 2,684 published in June 2024, newest first. The first page carries the figures for June 2024.

CVE-2024 records published in June 2024, newest first: records 1,001 to 2,000 of 2,684
CVE Summary CVSS EPSS Published Signals
CVE-2024-6080Intelbras InControl incontrolWebcam service unquoted search path7.8v3.10.2%2024-06-17Fix
CVE-2024-6067SourceCodester Music Class Enrollment System SQL injection9.8v3.10.5%2024-06-17
CVE-2024-6066SourceCodester Best House Rental Management System payment_report.php SQL injection9.8v3.10.5%2024-06-17
CVE-2024-6065itsourcecode Bakery Online Ordering System index.php SQL injection9.8v3.10.6%2024-06-17
CVE-2024-6064GPAC MP4Box loader_xmt.c xmt_node_end use-after-free5.5v3.10.3%2024-06-17
CVE-2024-6063GPAC MP4Box dmx_m2ts.c m2tsdmx_on_event null pointer dereference5.5v3.10.3%2024-06-17
CVE-2024-6062GPAC MP4Box load_text.c swf_svg_add_iso_sample null pointer dereference5.5v3.10.3%2024-06-17
CVE-2024-6061GPAC MP4Box isoffin_read.c isoffin_process infinite loop5.5v3.10.4%2024-06-17
CVE-2024-6059Ingenico Estate Manager News Feed messages cross-site scripting4.8v3.10.4%2024-06-17
CVE-2024-6058LabVantage LIMS cross-site scripting6.1v3.10.4%2024-06-17
CVE-2024-6057Devolutions Remote Desktop Manager vault password feature improper authentication9.8CISA ADP v3.10.9%2024-06-17Fix
CVE-2024-6056nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy5.3v3.10.7%2024-06-17
CVE-2024-6055Devolutions Remote Desktop Manager improper removal of sensitive information4.7CISA ADP v3.10.5%2024-06-17Fix
CVE-2024-6048Openfind MailGates and MailAudit OS command injection9.8CNA v3.10.7%2024-06-17Fix
CVE-2024-6047GeoVision Devices OS command injection9.8CNA v3.110.1%2024-06-17KEVEmerging Threats
CVE-2024-6045D-Link router Hidden backdoor8.8CNA v3.16.3%2024-06-17Fix
CVE-2024-6044D-Link router arbitrary file reading6.5CNA v3.10.4%2024-06-17Fix
CVE-2024-6043SourceCodester Best House Rental Management System admin_class.php login SQL injection9.8v3.11.9%2024-06-17Exploit code
CVE-2024-6042itsourcecode Real Estate Management System property-detail.php SQL injection9.8v3.10.6%2024-06-17
CVE-2024-5741Checkmk XSS in inventory view6.5CNA v3.10.3%2024-06-17Fix
CVE-2024-5650Yokogawa Electric CENTUM CS 3000 DLL hijacking8.5CNA v3.10.3%2024-06-17Fix
CVE-2024-5163Improper permission settings in com.transsion.carlcare9.8CISA ADP v3.10.5%2024-06-17
CVE-2024-4305PostX WordPress plugin Contributor+ stored XSS6.8CISA ADP v3.10.4%2024-06-17Fix
CVE-2024-4032Python CPython incorrect IPv4 and IPv6 private ranges7.5CISA ADP v3.11.1%2024-06-17Fix
CVE-2024-3236GhozyLab Popup Builder plugin stored cross-site scripting5.4CISA ADP v3.10.3%2024-06-17Fix
CVE-2024-0397Python CPython memory race condition in ssl.SSLContext certificate store methods7.4CISA ADP v3.10.8%2024-06-17Fix
CVE-2024-38468Guoxinled Synthesis Image System weak password recovery9.8v3.10.4%2024-06-16
CVE-2024-38467Guoxinled Synthesis Image System information disclosure7.5CISA ADP v3.10.4%2024-06-16
CVE-2024-38466Guoxinled Synthesis Image System hard-coded credentials9.8v3.10.4%2024-06-16
CVE-2024-38465Guoxinled Synthesis Image System observable discrepancy5.3v3.10.3%2024-06-16
CVE-2024-38462Irods untrusted search path9.8v3.10.6%2024-06-16Fix
CVE-2024-38461Irods improper check for exceptional conditions7.5v3.10.4%2024-06-16Fix
CVE-2024-38460SonarQube logs sensitive information6.5v3.10.3%2024-06-16Fix
CVE-2024-38459langchain-experimental langchain_experimental code execution via Python REPL access7.8CISA ADP v3.10.2%2024-06-16Fix
CVE-2024-38458XenForo code injection8.8v3.10.9%2024-06-16Fix
CVE-2024-38457XenForo cross-site request forgery8.8v3.17.4%2024-06-16Fix
CVE-2024-38454ExpressionEngine cross-site scripting6.1v3.10.3%2024-06-16
CVE-2024-38448GNU Global htags code injection9.1CISA ADP v3.10.5%2024-06-16Fix
CVE-2024-38443The Algorithms C binary insertion sort vulnerability6.2CISA ADP v3.10.2%2024-06-16
CVE-2024-38441Netatalk off-by-one error9.8CISA ADP v3.10.9%2024-06-16Fix
CVE-2024-38440Netatalk off-by-one error7.5CISA ADP v3.10.9%2024-06-16Fix
CVE-2024-38439Netatalk out-of-bounds write9.8v3.10.9%2024-06-16Fix
CVE-2024-38428GNU Wget interpretation conflict9.1v3.10.7%2024-06-16Fix
CVE-2024-38427In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.8.8CISA ADP v3.10.5%2024-06-16
CVE-2024-38396iTerm2 code injection9.8CISA ADP v3.11.7%2024-06-16Exploit code
CVE-2024-38395iTerm2 code injection9.8CISA ADP v3.11.5%2024-06-16Fix
CVE-2024-38394GNOME Settings Daemon USB device matching incorrect authorization4.3CISA ADP v3.10.3%2024-06-16Fix
CVE-2024-36397Vantiva improper neutralization of input during web page generation (cross-site scripting)6.1v3.10.3%2024-06-16Fix
CVE-2024-34451Ghost weak authentication9.1CISA ADP v3.10.8%2024-06-16Fix
CVE-2024-6041itsourcecode Gym Management System manage_user.php SQL injection8.8v3.10.5%2024-06-16
CVE-2024-6039Feng Office Workspaces SQL injection8.8v3.10.7%2024-06-16Exploit code
CVE-2024-31870IBM i information disclosure3.3CNA v3.10.2%2024-06-15Fix
CVE-2024-27275IBM i privilege escalation7.4CNA v3.10.2%2024-06-15Fix
CVE-2024-6016itsourcecode Online Laundry Management System admin_class.php SQL injection9.8v3.10.5%2024-06-15
CVE-2024-6015itsourcecode Online House Rental System manage_user.php SQL injection9.8v3.10.5%2024-06-15
CVE-2024-6014itsourcecode Document Management System edithis.php SQL injection9.8v3.10.5%2024-06-15
CVE-2024-6013itsourcecode Online Book Store admin_delete.php SQL injection9.8v3.10.5%2024-06-15
CVE-2024-6009itsourcecode Event Calendar process.php regDelete SQL injection9.8v3.10.5%2024-06-15
CVE-2024-6008itsourcecode Online Book Store edit_book.php SQL injection8.8v3.10.5%2024-06-15
CVE-2024-6007Netentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php SQL injection9.8v3.10.6%2024-06-15
CVE-2024-6006ZKTeco ZKBio CVSecurity V5000 Summer Schedule cross-site scripting5.1CNA v4.00.4%2024-06-15
CVE-2024-6005ZKTeco ZKBio CVSecurity V5000 Department Section cross-site scripting5.1CNA v4.00.4%2024-06-15
CVE-2024-6000FooEvents for WooCommerce WordPress plugin improper authorization to arbitrary file upload7.1CNA v3.10.5%2024-06-15Fix
CVE-2024-5871WooCommerce - Social Login WordPress plugin unauthenticated PHP object injection9.8CNA v3.10.7%2024-06-15Fix
CVE-2024-5868WooCommerce - Social Login WordPress plugin email verification due to insufficient randomness5.3v3.10.3%2024-06-15Fix
CVE-2024-5858Infographic Maker iList WordPress plugin missing authorization authenticated arbitrary Title update4.3CNA v3.10.3%2024-06-15Fix
CVE-2024-5611Stratum Elementor Widgets WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-15Fix
CVE-2024-5263ElementsKit Elementor addons and Templates Library WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-15Fix
CVE-2024-4551Video Gallery YouTube Playlist, Channel Gallery by YotuWP WordPress plugin arbitrary file inclusion8.8v3.10.6%2024-06-15Fix
CVE-2024-4479Jeg Elementor Kit WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-15Fix
CVE-2024-4258Video Gallery WordPress plugin local file inclusion9.8CNA v3.10.8%2024-06-15Fix
CVE-2024-4095Collapse-O-Matic WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-15
CVE-2024-3815Newspaper WordPress theme authenticated (Author+) stored cross-site scripting via Attachment Meta4.8v3.10.3%2024-06-15Fix
CVE-2024-3814tagDiv Composer WordPress plugin stored cross-site scripting4.8v3.10.3%2024-06-15Fix
CVE-2024-3813tagDiv Composer WordPress plugin authenticated (Contributor+) local file inclusion via shortcode8.8CNA v3.10.7%2024-06-15Fix
CVE-2024-3105Woody code snippets Insert Header Footer Code, AdSense Ads WordPress plugin remote code execution9.9CNA v3.12.8%2024-06-15Exploit codeFix
CVE-2024-2695Shariff Wrapper WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-15Fix
CVE-2024-2544Popup Builder WordPress plugin missing authorization in Multiple AJAX actions6.4NVD v3.10.3%2024-06-15Fix
CVE-2024-1399Restaurant Menu and Food Ordering WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-15Fix
CVE-2024-37889TreyWW MyFinances invoice access control insecure direct object reference6.5CNA v3.11.0%2024-06-14Fix
CVE-2024-37888The Open Link CKEditor plugin has a cross-site scripting vulnerability in Open Link functionality6.1CNA v3.10.9%2024-06-14Exploit codeFix
CVE-2024-37887Nextcloud Server's events information leaked with shared calendars on recurrence exceptions3.5CNA v3.10.4%2024-06-14Fix
CVE-2024-37886Nextcloud user_oidc's ID4me does not validate signature or expiration5.4CNA v3.10.2%2024-06-14Fix
CVE-2024-37885Code injection in Nextcloud Desktop client for macOS3.8CNA v3.10.3%2024-06-14Fix
CVE-2024-37884Nextcloud Server's users can delete old versions of read-only shared files3.5CNA v3.10.4%2024-06-14Fix
CVE-2024-37883Nextcloud Deck can access comments and attachments of deleted cards4.3CNA v3.10.4%2024-06-14Fix
CVE-2024-37882Nextcloud Server can reshare read&share only folder with more permissions8.1CNA v3.10.5%2024-06-14Fix
CVE-2024-37831itsourcecode Payroll Management System SQL injection9.8v3.10.4%2024-06-14
CVE-2024-37645TRENDnet Tew-814dap stack-based buffer overflow8.8CISA ADP v3.10.7%2024-06-14
CVE-2024-37644TRENDnet Tew-814dap hard-coded password8.8CISA ADP v3.10.5%2024-06-14
CVE-2024-37643TRENDnet Tew-814dap stack-based buffer overflow8.8CISA ADP v3.10.7%2024-06-14
CVE-2024-37642TRENDnet Tew-814dap command injection9.1CISA ADP v3.111.4%2024-06-14Emerging Threats
CVE-2024-37641TRENDnet Tew-814dap stack-based buffer overflow8.8CISA ADP v3.10.6%2024-06-14
CVE-2024-37640TOTOLINK A3700R stack-based buffer overflow8.8CISA ADP v3.10.6%2024-06-14
CVE-2024-37639TOTOLINK A3700R stack-based buffer overflow8.8CISA ADP v3.10.6%2024-06-14
CVE-2024-37637TOTOLINK A3700R buffer overflow9.8CISA ADP v3.10.7%2024-06-14
CVE-2024-37369Rockwell Automation FactoryTalk® View SE local privilege escalation vulnerability8.5CNA v4.00.3%2024-06-14Fix
CVE-2024-37368Rockwell Automation FactoryTalk® View SE v11 information leakage vulnerability8.2CNA v4.00.5%2024-06-14Fix
CVE-2024-37367Rockwell Automation FactoryTalk® View SE v12 information leakage vulnerability8.2CNA v4.00.5%2024-06-14Fix
CVE-2024-37317Nextcloud Notes app can be tricked into using a received share created before the user logged in4.6CNA v3.10.3%2024-06-14Fix
CVE-2024-37316Nextcloud Calendar's event create can create attachments that link to other websites4.6CNA v3.10.4%2024-06-14Fix
CVE-2024-37315Nextcloud Server's read-only users can restore old versions3.5CNA v3.10.4%2024-06-14Fix
CVE-2024-37314Nextcloud Photos' shared albums have no restriction on photo removal3.5CNA v3.10.4%2024-06-14Fix
CVE-2024-37313Nextcloud Server allows the by-pass the second factor7.3CNA v3.10.4%2024-06-14Fix
CVE-2024-37312Nextcloud user_oidc app's ID4me feature is available even when disabled6.3CNA v3.10.6%2024-06-14Fix
CVE-2024-37182Mattermost lack of permissions prompting when opening external URLs4.7CNA v3.10.3%2024-06-14Fix
CVE-2024-36656Minthcm cross-site scripting6.1CISA ADP v3.10.3%2024-06-14
CVE-2024-36600GNU Libcdio buffer overflow8.4CISA ADP v3.10.4%2024-06-14Fix
CVE-2024-36599Aegon Life Insurance Management System cross-site scripting6.1v3.10.3%2024-06-14
CVE-2024-36598Aegon Life v1.0 An arbitrary file upload8.1CISA ADP v3.10.6%2024-06-14
CVE-2024-36597Projectworlds Life Insurance Management System SQL injection8.8v3.12.3%2024-06-14
CVE-2024-36503Huawei HarmonyOS memory management vulnerability in the Gralloc module7.3CNA v3.10.1%2024-06-14Fix
CVE-2024-36502Huawei HarmonyOS out-of-bounds read vulnerability in the audio module7.9CNA v3.10.1%2024-06-14Fix
CVE-2024-36501Huawei HarmonyOS memory management vulnerability in the boottime module5.6CNA v3.10.1%2024-06-14Fix
CVE-2024-36500Huawei HarmonyOS privilege escalation vulnerability in the AMS module7.8CNA v3.10.1%2024-06-14Fix
CVE-2024-36499Huawei HarmonyOS vulnerability of unauthorized screenshot capturing in the WMS module6.8CNA v3.10.1%2024-06-14Fix
CVE-2024-36459Cross-site scripting vulnerability in Symantec SiteMinder Web agent8.4CNA v4.00.4%2024-06-14Fix
CVE-2024-36287Mattermost bypass of TCC restrictions on macOS3.8CNA v3.10.2%2024-06-14Fix
CVE-2024-34694LNbits improperly handles potential network and payment failures when using Eclair backend8.1CNA v3.10.6%2024-06-14Fix
CVE-2024-34539TerraMaster TOS firmware hard-coded credentials9.4CISA ADP v3.10.5%2024-06-14
CVE-2024-34012Acronis Cloud Manager incorrect default permissions4.4CNA v3.00.1%2024-06-14Fix
CVE-2024-33377LB-LINK Bl-w1210m clickjacking8.1CISA ADP v3.10.4%2024-06-14
CVE-2024-33375LB-LINK Bl-w1210m plaintext password storage9.8CISA ADP v3.10.6%2024-06-14
CVE-2024-33374LB-LINK BL-W1210M router UART/serial interface improper access control9.8CISA ADP v3.10.5%2024-06-14
CVE-2024-33373LB-LINK Bl-w1210m insecure direct object reference6.3CISA ADP v3.10.3%2024-06-14
CVE-2024-31163ASUS Download Master buffer overflow7.2CNA v3.10.6%2024-06-14Fix
CVE-2024-31162ASUS Download Master OS command injection7.2CNA v3.10.6%2024-06-14Fix
CVE-2024-31161ASUS Download Master arbitrary file upload7.2CNA v3.10.5%2024-06-14Fix
CVE-2024-31160ASUS Download Master stored XSS4.8CNA v3.10.3%2024-06-14Fix
CVE-2024-31159ASUS Download Master reflected XSS4.8CNA v3.10.3%2024-06-14Fix
CVE-2024-30120HCL DRYiCE Optibot Reset Station is impacted by an Unused parameter in the web application2.9CNA v3.10.2%2024-06-14
CVE-2024-30119HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security header3.7CNA v3.10.2%2024-06-14
CVE-2024-27180Toshiba Tec e-Studio multi-function peripheral (MFP) TOCTOU6.7CNA v3.10.3%2024-06-14
CVE-2024-27179Toshiba Tec e-Studio multi-function peripheral (MFP) session disclosure inside the log files4.7CNA v3.10.3%2024-06-14
CVE-2024-27178Toshiba Tec e-Studio multi-function peripheral (MFP) remote code execution7.2CNA v3.11.5%2024-06-14
CVE-2024-27177Toshiba Tec e-Studio multi-function peripheral (MFP) remote code execution7.2CNA v3.11.5%2024-06-14
CVE-2024-27176Toshiba Tec e-Studio multi-function peripheral (MFP) remote code execution7.2CNA v3.11.5%2024-06-14
CVE-2024-27175Toshiba Tec e-Studio multi-function peripheral (MFP) local file inclusion4.4CNA v3.10.9%2024-06-14
CVE-2024-27174Toshiba e-Studio multi-function peripheral Remote Command program path traversal9.8CNA v3.11.6%2024-06-14
CVE-2024-27173Toshiba e-Studio multi-function peripheral Remote Command program path traversal9.8CNA v3.13.2%2024-06-14Exploit code
CVE-2024-27172Toshiba Tec e-Studio multi-function peripheral (MFP) remote code execution9.8CNA v3.126.8%2024-06-14
CVE-2024-27171Toshiba Tec e-Studio multi-function peripheral (MFP) insecure permissions7.4CNA v3.10.5%2024-06-14
CVE-2024-27170Toshiba Tec e-Studio multi-function peripheral (MFP) hard-coded credentials for WebDAV access7.4CNA v3.10.3%2024-06-14
CVE-2024-27169Toshiba e-Studio multi-function peripheral internal API missing authentication8.4CNA v3.10.3%2024-06-14
CVE-2024-27168Toshiba e-Studio multi-function peripheral authentication cookie generation hard-coded credentials7.1CNA v3.10.3%2024-06-14
CVE-2024-27167Toshiba Tec e-Studio multi-function peripheral (MFP) insecure permissions7.4CNA v3.10.2%2024-06-14
CVE-2024-27166Toshiba Tec e-Studio multi-function peripheral (MFP) insecure permissions7.4CNA v3.10.2%2024-06-14
CVE-2024-27165Toshiba Tec e-Studio multi-function peripheral (MFP) local privilege escalation7.8CNA v3.10.2%2024-06-14
CVE-2024-27164Toshiba Tec e-Studio multi-function peripheral (MFP) hard-coded credentials7.1CNA v3.10.3%2024-06-14
CVE-2024-27163Toshiba Tec e-Studio multi-function peripheral (MFP) leak of admin password and passwords6.5CNA v3.10.4%2024-06-14
CVE-2024-27162Toshiba Tec e-Studio multi-function peripheral (MFP) DOM-based XSS6.1CNA v3.121.2%2024-06-14
CVE-2024-27161Toshiba Tec e-Studio multi-function peripheral (MFP) hard-coded password used to encrypt files6.2CNA v3.10.2%2024-06-14
CVE-2024-27160Toshiba e-Studio multi-function peripheral log encryption script hard-coded credentials6.2CNA v3.10.2%2024-06-14
CVE-2024-27159Toshiba Tec e-Studio multi-function peripheral (MFP) hard-coded password used to encrypt logs6.2CNA v3.10.3%2024-06-14
CVE-2024-27158Toshiba Tec e-Studio multi-function peripheral (MFP) hard-coded root password7.4CNA v3.10.3%2024-06-14
CVE-2024-27157Toshiba Tec e-Studio multi-function peripheral (MFP) leak of authentication sessions in secure logs6.8CNA v3.10.4%2024-06-14
CVE-2024-27156Toshiba Tec e-Studio multi-function peripheral (MFP) leak of authentication sessions in secure logs6.8CNA v3.10.4%2024-06-14
CVE-2024-27155Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.7CNA v3.10.4%2024-06-14
CVE-2024-27154Toshiba Tec e-Studio multi-function peripheral (MFP) passwords are stored in clear-text logs6.2CNA v3.10.3%2024-06-14
CVE-2024-27153Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.2%2024-06-14
CVE-2024-27152Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.2%2024-06-14
CVE-2024-27151Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.4%2024-06-14
CVE-2024-27150Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.2%2024-06-14
CVE-2024-27149Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.2%2024-06-14
CVE-2024-27148Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.2%2024-06-14
CVE-2024-27147Toshiba Tec e-Studio multi-function peripheral local privilege escalation and remote code execution7.4CNA v3.10.3%2024-06-14
CVE-2024-27146Toshiba Tec e-Studio multi-function peripheral (MFP) execution with unnecessary privileges6.7CNA v3.10.2%2024-06-14
CVE-2024-27145Toshiba Tec e-Studio multi-function peripheral multiple Post-authenticated remote code execution9.8CNA v3.11.0%2024-06-14
CVE-2024-27144Toshiba Tec e-Studio multi-function peripheral (MFP) pre-authenticated remote code execution9.8CNA v3.11.2%2024-06-14
CVE-2024-27143Toshiba Tec e-Studio multi-function peripheral (MFP) pre-authenticated remote code execution9.8CNA v3.11.1%2024-06-14
CVE-2024-27142Toshiba Tec e-Studio multi-function peripheral (MFP) pre-authenticated XXE injection5.9CNA v3.10.9%2024-06-14
CVE-2024-27141Toshiba Tec e-Studio multi-function peripheral pre-authenticated Time-based blind XXE injection5.9CNA v3.11.1%2024-06-14
CVE-2024-25142Apache Airflow: Cache Control Storage of Sensitive Data in Browser Cache5.5v3.10.3%2024-06-14Fix
CVE-2024-24320MGT-COMMERCE CloudPanel path traversal8.8v3.14.0%2024-06-14
CVE-2024-23504Ninja Tables WordPress plugin broken access control5.3v3.10.3%2024-06-14Fix
CVE-2024-23442Kibana open redirect issue6.1CNA v3.10.3%2024-06-14Fix
CVE-2024-21988SSH Cryptographic Implementation vulnerability in StorageGRID (formerly StorageGRID Webscale)5.3CNA v3.10.2%2024-06-14Fix
CVE-2024-6003Guangdong Baolun Electronics IP Network Broadcasting Service Platform maps SQL injection6.9CNA v4.00.5%2024-06-14
CVE-2024-5995Soar Cloud HR Portal insufficient session expiration8.8CNA v3.10.4%2024-06-14Fix
CVE-2024-5994WP Go Maps (formerly WP Google Maps) WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-14Fix
CVE-2024-5985SourceCodester Best Online News Portal index.php SQL injection8.8v3.10.6%2024-06-14
CVE-2024-5984itsourcecode Online Bookstore book.php SQL injection9.8v3.10.8%2024-06-14
CVE-2024-5983itsourcecode Online Bookstore bookPerPub.php SQL injection9.8v3.10.6%2024-06-14
CVE-2024-5981itsourcecode Online House Rental System manage_user.php SQL injection9.8v3.10.5%2024-06-14
CVE-2024-5961Reflected XSS in 2ClickPortal5.3CNA v4.01.3%2024-06-14Exploit codeFix
CVE-2024-5731Trellix Intrusion Prevention System (IPS) Manager missing encryption6.8CNA v3.10.3%2024-06-14
CVE-2024-5685Broken Function Level Authorization (BFLA) in snipe/Snipe-IT8.1NVD v3.10.4%2024-06-14Fix
CVE-2024-5671Trellix Intrusion Prevention System (IPS) Manager deserialization of untrusted data9.8CNA v3.10.9%2024-06-14
CVE-2024-5659Rockwell Automation Multicast request causes major nonrecoverable fault on Select Controllers8.3CNA v4.00.3%2024-06-14Fix
CVE-2024-5577Where I Was, Where I Will Be WordPress plugin unauthenticated remote file inclusion9.8CNA v3.10.9%2024-06-14
CVE-2024-5551WP STAGING Pro WordPress Backup Plugin WordPress plugin cross-site request forgery8.8v3.10.3%2024-06-14Fix
CVE-2024-5469Uncontrolled resource consumption in GitLab3.1CNA v3.10.4%2024-06-14Fix
CVE-2024-5465Huawei HarmonyOS function vulnerabilities in the Calendar module5.9CNA v3.10.1%2024-06-14Fix
CVE-2024-5464Huawei HarmonyOS vulnerability of insufficient permission verification in the NearLink module4.0CNA v3.10.1%2024-06-14Fix
CVE-2024-5155Inquiry Cart WordPress plugin stored XSS via CSRF6.1CISA ADP v3.10.2%2024-06-14
CVE-2024-4936Canto WordPress plugin unauthenticated remote file inclusion9.8CNA v3.11.0%2024-06-14Fix
CVE-2024-4863Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting5.4v3.10.5%2024-06-14Fix
CVE-2024-4751WP Prayer II WordPress plugin settings update via CSRF4.3NVD v3.10.2%2024-06-14Fix
CVE-2024-4480WP Prayer II WordPress plugin email settings update via CSRF6.1CISA ADP v3.10.2%2024-06-14Fix
CVE-2024-4404ElementsKit PRO WordPress plugin authenticated (Contributor+) server-side request forgery9.6v3.10.3%2024-06-14Fix
CVE-2024-4271SVGator WordPress plugin stored XSS via SVG upload4.6CISA ADP v3.10.3%2024-06-14Fix
CVE-2024-4270SVGMagic WordPress plugin stored XSS via SVG upload5.4NVD v3.10.3%2024-06-14
CVE-2024-4005Social Pixel WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2024-06-14
CVE-2024-3993AZAN WordPress plugin stored XSS via CSRF4.6CISA ADP v3.10.2%2024-06-14Fix
CVE-2024-3992Amen WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2024-06-14Fix
CVE-2024-3978WordPress Jitsi Shortcode plugin Contributor+ stored XSS via shortcode5.4NVD v3.10.4%2024-06-14
CVE-2024-3977WordPress Jitsi Shortcode plugin Admin+ stored XSS4.8NVD v3.10.3%2024-06-14
CVE-2024-3972Similarity WordPress plugin stored XSS via CSRF4.3NVD v3.10.2%2024-06-14
CVE-2024-3971Similarity WordPress plugin plugin reset via CSRF4.3NVD v3.10.2%2024-06-14
CVE-2024-3966Pray For Me WordPress plugin unauthenticated stored XSS6.1NVD v3.10.3%2024-06-14
CVE-2024-3965Pray For Me WordPress plugin settings update via CSRF5.4CISA ADP v3.10.2%2024-06-14
CVE-2024-3912ASUS Router upload arbitrary firmware9.8CNA v3.11.0%2024-06-14Exploit codeFix
CVE-2024-3754Alemha Watermarker WordPress plugin Author+ stored XSS4.7CISA ADP v3.10.4%2024-06-14
CVE-2024-3498Toshiba Tec e-Studio multi-function peripheral incorrect permission assignment privilege escalation7.8CNA v3.10.3%2024-06-14
CVE-2024-3497Toshiba Tec e-Studio multi-function peripheral (MFP) directory traversal remote code execution8.8CNA v3.10.7%2024-06-14
CVE-2024-3496Toshiba Tec e-Studio multi-function peripheral (MFP) authentication bypass8.8CNA v3.10.7%2024-06-14
CVE-2024-3080ASUS Router improper authentication9.8CNA v3.143.5%2024-06-14NucleiEmerging ThreatsKCVFix
CVE-2024-3079ASUS Router stack-based buffer overflow7.2CNA v3.10.8%2024-06-14KCVFix
CVE-2024-2472LatePoint WordPress plugin missing authorization and sensitive information exposure via IDOR9.1CNA v3.10.6%2024-06-14Fix
CVE-2024-2218LuckyWP Table of Contents for WordPress Admin+ stored XSS4.6CISA ADP v3.10.3%2024-06-14
CVE-2024-2122FooGallery WordPress plugin stored cross-site scripting5.4v3.10.5%2024-06-14Fix
CVE-2024-2024Folders Pro WordPress plugin arbitrary file upload8.8CNA v3.13.3%2024-06-14Fix
CVE-2024-2023Folders and Folders Pro WordPress plugin path traversal4.3CNA v3.10.7%2024-06-14Fix
CVE-2024-1295The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)6.5NVD v3.10.5%2024-06-14Fix
CVE-2024-1094Arraytics Timetics privilege escalation7.3CNA v3.10.5%2024-06-14Fix
CVE-2024-0892Schema App Structured Data WordPress plugin cross-site request forgery4.3CNA v3.10.3%2024-06-14Fix
CVE-2024-38313Mozilla Firefox UI misrepresentation4.3v3.10.2%2024-06-13Fix
CVE-2024-38312Mozilla Firefox insecure storage of sensitive information6.5v3.10.3%2024-06-13Fix
CVE-2024-38295Alcasar remote code execution9.8v3.10.8%2024-06-13Fix
CVE-2024-38294Alcasar remote code execution9.8v3.10.8%2024-06-13Fix
CVE-2024-38293Alcasar cross-site request forgery9.6CISA ADP v3.10.4%2024-06-13Fix
CVE-2024-38285Insufficiently protected credentials in Motorola Solutions Vigilant Fixed LPR Coms Box7.0CNA v4.00.2%2024-06-13Fix
CVE-2024-38284Authentication bypass by capture-replay in Motorola Solutions Vigilant Fixed LPR Coms Box8.7CNA v4.00.3%2024-06-13Fix
CVE-2024-38283Missing encryption of sensitive data in Motorola Solutions Vigilant Fixed LPR Coms Box5.1CNA v4.00.1%2024-06-13Fix
CVE-2024-38282Insufficiently protected credentials in Motorola Solutions Vigilant Fixed LPR Coms Box8.5CNA v4.00.2%2024-06-13Fix
CVE-2024-38281Motorola Solutions Vigilant Fixed LPR Coms Box maintenance console hard-coded credentials9.8v3.10.4%2024-06-13Fix
CVE-2024-38280Cleartext storage in a file or on disk in Motorola Solutions Vigilant Fixed LPR Coms Box4.6NVD v3.10.2%2024-06-13
CVE-2024-38279Motorola Solutions Vigilant Fixed LPR Coms Box bootloader authentication bypass4.6v3.10.3%2024-06-13Fix
CVE-2024-38083Microsoft Edge (Chromium-based) spoofing4.3CNA v3.10.5%2024-06-13Fix
CVE-2024-37877UERANSIM RLS message decoder out-of-bounds read5.5CISA ADP v3.10.3%2024-06-13
CVE-2024-37849itsourcecode Billing System SQL injection9.8v3.10.7%2024-06-13
CVE-2024-37635TOTOLINK A3700R buffer overflow9.8v3.10.7%2024-06-13
CVE-2024-37634TOTOLINK A3700R stack-based buffer overflow9.8CISA ADP v3.10.7%2024-06-13
CVE-2024-37633TOTOLINK A3700R stack-based buffer overflow8.8CISA ADP v3.10.6%2024-06-13
CVE-2024-37632TOTOLINK A3700R buffer overflow9.8v3.10.6%2024-06-13
CVE-2024-37631TOTOLINK A3700R stack-based buffer overflow8.8CISA ADP v3.10.6%2024-06-13
CVE-2024-37630D-Link DIR-605L hard-coded credentials8.8CISA ADP v3.10.4%2024-06-13
CVE-2024-37309crate client initialized Session-Renegotiation DoS5.3CNA v3.10.7%2024-06-13Fix
CVE-2024-37308WordPress Cooked Plugin Authenticated (Contributor+) persistent cross-site scripting5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-37307Cilium leaks sensitive information in cilium-bugtool7.9CNA v3.10.2%2024-06-13Fix
CVE-2024-37306Cvat's export and backup-related API endpoints are susceptible to CSRF7.1CNA v3.10.2%2024-06-13Fix
CVE-2024-37280Elasticsearch passthrough field mapping ingestion denial of service4.9CNA v3.10.6%2024-06-13Fix
CVE-2024-37279Kibana broken access control issue4.3CNA v3.10.4%2024-06-13Fix
CVE-2024-37164Cvat SSRF via custom cloud storage endpoints7.1CNA v3.10.3%2024-06-13Fix
CVE-2024-37131Dell Secure Connect Gateway (SCG) Policy Manager permissive cross-domain policy7.5CNA v3.10.5%2024-06-13Fix
CVE-2024-37029Fuji Electric Tellus Lite V-Simulator stack-based buffer overflow7.8v3.10.3%2024-06-13Fix
CVE-2024-37022Fuji Electric Tellus Lite V-Simulator out-of-bounds write7.8v3.10.3%2024-06-13Fix
CVE-2024-36760Rhai stack overflow vulenrability7.5CISA ADP v3.10.4%2024-06-13
CVE-2024-36647ChurchCRM Church CRM v5.8.0 stored cross-site scripting5.4CISA ADP v3.10.3%2024-06-13
CVE-2024-36589DecentralizeJustice anonymousLocker cleartext storage of sensitive information4.3CISA ADP v3.10.2%2024-06-13
CVE-2024-36588DecentralizeJustice anonymousLocker authentication bypass by spoofing6.5CISA ADP v3.10.4%2024-06-13
CVE-2024-36587DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 insecure permissions7.8CISA ADP v3.10.2%2024-06-13
CVE-2024-36586AdGuardHome privilege escalation8.8CISA ADP v3.10.2%2024-06-13
CVE-2024-36396Verint unrestricted upload of file with dangerous type8.8v3.10.4%2024-06-13Fix
CVE-2024-36395Verint improper neutralization of script-related HTML tags in a web page (basic XSS)6.1v3.10.3%2024-06-13Fix
CVE-2024-36239Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36238Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36236Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36235Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36234Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36233Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36232Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36231Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36230Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36229Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36228Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36227Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36226Adobe Experience Manager improper input validation3.5CNA v3.10.7%2024-06-13Fix
CVE-2024-36225Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36224Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36222Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36221Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36220Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36219Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36218Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36217Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36216Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36215Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-36214Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36213Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36212Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36211Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36210Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36209Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36208Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36207Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36206Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36205Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36204Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36203Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36202Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36201Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36200Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36199Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36198Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36197Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.8%2024-06-13Fix
CVE-2024-36196Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36195Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36194Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36193Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36192Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36191Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36190Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36189Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36188Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36187Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36186Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36185Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36184Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36183Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36182Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36181Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36180Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-36179Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36178Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36177Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36176Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36175Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36174Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36173Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36172Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36171Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36170Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36169Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36168Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36167Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36166Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36165Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36164Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36163Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36162Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36161Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36160Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36159Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-36158Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36157Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36156Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36155Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36154Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36153Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36152Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36151Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36150Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36149Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36148Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36147Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36146Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36144Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36143Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36142Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-36141Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.8%2024-06-13Fix
CVE-2024-34130Adobe Acrobat Mobile Sign Android incorrect authorization5.5CNA v3.10.3%2024-06-13Fix
CVE-2024-34129Adobe Acrobat Mobile Sign Android path traversal7.5CNA v3.10.3%2024-06-13Fix
CVE-2024-34120Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-34119Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-34116Adobe Creative Cloud Desktop uncontrolled search path7.1CNA v3.10.3%2024-06-13Fix
CVE-2024-34115Adobe Substance 3D Stager SKP File Parsing out-of-bounds write remote code execution7.8CNA v3.10.4%2024-06-13Fix
CVE-2024-34113Adobe ColdFusion weak cryptography for Passwords5.5CNA v3.10.3%2024-06-13Fix
CVE-2024-34112Adobe ColdFusion CFDOCUMENT file retrieval / access control bypass7.5CNA v3.123.7%2024-06-13Fix
CVE-2024-34111Adobe Commerce SSRF in service connector6.5CNA v3.11.3%2024-06-13Fix
CVE-2024-34110RCE in the Adobe Commerce Webhook module through a legit webhook definition7.2CNA v3.11.4%2024-06-13Fix
CVE-2024-34109Adobe Commerce improper input validation7.2CNA v3.11.4%2024-06-13Fix
CVE-2024-34108Large attack surface through legit webhook usage in Adobe Commerce9.1CNA v3.11.4%2024-06-13Fix
CVE-2024-34107Adobe Commerce improper access control5.3CNA v3.11.1%2024-06-13Fix
CVE-2024-34106Adobe Commerce Magento Open Source incorrect authorization5.3CNA v3.10.8%2024-06-13Fix
CVE-2024-34105Adobe Commerce stored cross-site scripting in Order Comment4.8CNA v3.10.7%2024-06-13Fix
CVE-2024-34104Adobe Commerce improper authorization8.2CNA v3.10.8%2024-06-13Fix
CVE-2024-34103Adobe Commerce Magento Open Source improper authentication8.1CNA v3.10.9%2024-06-13Fix
CVE-2024-34102Adobe Commerce and Magento Open Source improper restriction of XML external entity reference (XXE)9.8CNA v3.1100.0%2024-06-13KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2024-33253openeclass GUnet cross-site scripting5.4v3.10.4%2024-06-13
CVE-2024-32930Google Android slc_plugin.c information disclosure5.5CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32929Google Android pixel_gpu_slc.c elevation of privilege8.1CISA ADP v3.10.2%2024-06-13Fix
CVE-2024-32926Google Android observable discrepancy5.5CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32925Google Android dhd_msgbuf.c out-of-bounds write8.8CISA ADP v3.10.3%2024-06-13Fix
CVE-2024-32924Google Android cn_NrmmStateDeregInit.cpp denial of service7.5CISA ADP v3.10.3%2024-06-13Fix
CVE-2024-32923Google Android logic flaw4.0CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32922Google Android pixel_gpu_power.c privilege escalation7.4CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32921Google Android lwis_fence.c out-of-bounds write7.4CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32920Google Android sac_handler.c out-of-bounds read7.1CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32919Google Android lwis_fence.c privilege escalation7.8CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32918Google Android improper privilege management6.1v3.10.1%2024-06-13Fix
CVE-2024-32917Google Android fp_spi_dma.c out-of-bounds write7.1CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32916Google Android fvp.c information disclosure5.9CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32915Google Android protocolnetadapter.cpp out-of-bounds read4.3CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32914Google Android tpu.c information disclosure5.5CISA ADP v3.10.1%2024-06-13Fix
CVE-2024-32913Google Android wl_cfg80211.c out-of-bounds write9.8v3.10.3%2024-06-13Fix
CVE-2024-32912Google Android denial of service5.5v3.10.1%2024-06-13Fix
CVE-2024-32911Google Android weak cryptographic algorithm9.8v3.10.2%2024-06-13Fix
CVE-2024-32910Google Android tipc.c information disclosure5.5v3.10.1%2024-06-13Fix
CVE-2024-32909Google Android main.cpp out-of-bounds write7.8v3.10.2%2024-06-13Fix
CVE-2024-32908Google Android media.c insecure permissions7.8v3.10.1%2024-06-13Fix
CVE-2024-32907Google Android memlog.c buffer overflow7.8v3.10.1%2024-06-13Fix
CVE-2024-32906Google Android avcp.cpp elevation of privilege7.8v3.10.1%2024-06-13Fix
CVE-2024-32905Google Android link_device_memory_legacy.c out-of-bounds write9.8v3.10.3%2024-06-13Fix
CVE-2024-32904Google Android protocolvsimadapter.cpp out-of-bounds read4.7v3.10.1%2024-06-13Fix
CVE-2024-32903Google Android lwis_transaction.c out-of-bounds write7.8v3.10.1%2024-06-13Fix
CVE-2024-32902Google Android resource exhaustion7.5v3.10.2%2024-06-13Fix
CVE-2024-32901Google Android smfc-v4l2-ioctls.c out-of-bounds write7.8v3.10.1%2024-06-13Fix
CVE-2024-32900Google Android lwis_debug.c use-after-free7.8NVD v3.10.2%2024-06-13Fix
CVE-2024-32899Google Android pixel_gpu_power.c privilege escalation7.0v3.10.1%2024-06-13Fix
CVE-2024-32898Google Android protocolnetadapter.cpp out-of-bounds read4.7v3.10.1%2024-06-13Fix
CVE-2024-32897Google Android protocolsmsadapter.cpp out-of-bounds read5.9v3.10.3%2024-06-13Fix
CVE-2024-32896Android Pixel privilege escalation7.8v3.13.0%2024-06-13KEVFix
CVE-2024-32895Google Android dhd_msgbuf.c out-of-bounds write7.8NVD v3.10.2%2024-06-13Fix
CVE-2024-32894Google Android bc_utilities.c out-of-bounds read7.5v3.10.3%2024-06-13Fix
CVE-2024-32893Google Android exynos_dvfs.c out-of-bounds read5.5NVD v3.10.2%2024-06-13Fix
CVE-2024-32892Google Android main.c memory corruption7.8v3.10.1%2024-06-13Fix
CVE-2024-32891Google Android media.c memory corruption7.0v3.10.1%2024-06-13Fix
CVE-2024-32860Dell CPG BIOS improper input validation7.5CNA v3.10.2%2024-06-13Fix
CVE-2024-32859Dell CPG BIOS improper input validation7.5CNA v3.10.2%2024-06-13Fix
CVE-2024-32858Dell CPG BIOS improper input validation7.5CNA v3.10.2%2024-06-13Fix
CVE-2024-32856Dell CPG BIOS improper input validation5.1CNA v3.10.1%2024-06-13Fix
CVE-2024-32504Samsung Exynos 1080 out-of-bounds write7.8v3.10.2%2024-06-13Fix
CVE-2024-31956Samsung Exynos 1480 out-of-bounds write7.8v3.10.2%2024-06-13Fix
CVE-2024-31777openeclass file upload9.8CISA ADP v3.13.8%2024-06-13Exploit code
CVE-2024-30472Dell Wyse 5070 Thin Client information disclosure7.5CNA v3.11.2%2024-06-13Fix
CVE-2024-30300Adobe Framemaker Publishing Server tenable vulnerability Disclosure sensitive information disclosure9.8CNA v3.10.7%2024-06-13Fix
CVE-2024-30299Adobe Framemaker Publishing Server Tenable vulnerability Disclosure API Auth Bypass10.0CNA v3.11.1%2024-06-13Fix
CVE-2024-30285Adobe Audition 2024 MP4 File Parsing null pointer dereference5.5CNA v3.10.4%2024-06-13Fix
CVE-2024-30278Adobe Media Encoder 2024 TGA file parsing memory corruption5.5CNA v3.10.4%2024-06-13Fix
CVE-2024-30276Adobe Audition 2024 M2V File Parsing memory corruption5.5CNA v3.10.5%2024-06-13Fix
CVE-2024-30058Microsoft Edge (Chromium-based) spoofing5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-30057Microsoft Edge for iOS spoofing5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-29787Google Android lwis_transaction.c use-after-free7.8v3.10.1%2024-06-13Fix
CVE-2024-29786Google Android link_rx_pktproc.c out-of-bounds write9.8v3.10.3%2024-06-13Fix
CVE-2024-29785Google Android aurora.c information disclosure5.5v3.10.1%2024-06-13Fix
CVE-2024-29784Google Android lwis_periodic_io.c out-of-bounds write7.8v3.10.1%2024-06-13Fix
CVE-2024-29781Google Android ss_OssAsnManagement.c out-of-bounds read7.5v3.10.3%2024-06-13Fix
CVE-2024-29780Google Android hwbcc.c uninitialized memory use5.5v3.10.1%2024-06-13Fix
CVE-2024-29778Google Android protocolpsadapter.cpp out-of-bounds read4.7v3.10.1%2024-06-13Fix
CVE-2024-29169Dell Secure Connect Gateway-Application SQL injection5.4CNA v3.10.4%2024-06-13Fix
CVE-2024-29168Dell Secure Connect Gateway-Application SQL injection5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-28969Dell Secure Connect Gateway-Application improper access control4.3CNA v3.10.4%2024-06-13Fix
CVE-2024-28968Dell Secure Connect Gateway-Application improper access control5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-28967Dell Secure Connect Gateway-Application improper access control5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-28966Dell Secure Connect Gateway-Application improper access control5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-28965Dell Secure Connect Gateway-Application improper access control5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-26127Adobe Experience Manager improper input validation3.5CNA v3.10.7%2024-06-13Fix
CVE-2024-26126Adobe Experience Manager improper input validation3.5CNA v3.10.7%2024-06-13Fix
CVE-2024-26123Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26121Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26117Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26116Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.8%2024-06-13Fix
CVE-2024-26115Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.8%2024-06-13Fix
CVE-2024-26114Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26113Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26111Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26110Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26095Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26093Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26092Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.8%2024-06-13Fix
CVE-2024-26091Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.8%2024-06-13Fix
CVE-2024-26090Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26089Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26088Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26086Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26085Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26083Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26082Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26081Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26078Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26077Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26075Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26074Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26072Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26071Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26070Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26068Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26066Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26060Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26058Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26057Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26055Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26054Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-26053Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26049Adobe Experience Manager cross-site scripting (stored XSS)4.8CNA v3.10.6%2024-06-13Fix
CVE-2024-26039Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2024-06-13Fix
CVE-2024-26037Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26036Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2024-06-13Fix
CVE-2024-26029Adobe Experience Manager improper access control7.5CNA v3.11.0%2024-06-13Fix
CVE-2024-25052IBM Jazz Reporting Service information disclosure4.4CNA v3.10.2%2024-06-13Fix
CVE-2024-22441HPE Cray System Management Software improper authentication9.8v3.10.5%2024-06-13Fix
CVE-2024-22333IBM Maximo Application Suite information disclosure3.3CNA v3.10.2%2024-06-13Fix
CVE-2024-20784Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-20769Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.7%2024-06-13Fix
CVE-2024-20753Adobe Photoshop PDF File Parsing memory corruption remote code execution7.8CNA v3.10.3%2024-06-13Fix
CVE-2024-5976SourceCodester Employee and Visitor Gate Pass Logging System log_employee SQL injection9.8v3.10.7%2024-06-13
CVE-2024-5952Deep Sea Electronics DSE855 Restart missing authentication denial of service6.5v3.10.6%2024-06-13
CVE-2024-5951Deep Sea Electronics DSE855 Factory Reset missing authentication denial of service6.5NVD v3.10.8%2024-06-13
CVE-2024-5950Deep Sea Electronics DSE855 multipart form value handling stack-based buffer overflow8.8v3.11.1%2024-06-13
CVE-2024-5949Deep Sea Electronics DSE855 Multipart Boundary infinite loop denial of service6.5v3.10.6%2024-06-13
CVE-2024-5948Deep Sea Electronics DSE855 Multipart Boundary stack-based buffer overflow remote code execution8.8v3.11.1%2024-06-13
CVE-2024-5947Deep Sea Electronics DSE855 Configuration Backup missing authentication information disclosure6.5v3.12.4%2024-06-13NucleiExploit codeFix
CVE-2024-5924Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass vulnerability8.8v3.11.2%2024-06-13
CVE-2024-5787PowerPack Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-13Fix
CVE-2024-5757Elementor Header and Footer Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-13Fix
CVE-2024-5661Potential denial of service affecting XenServer and Citrix Hypervisor6.0v3.10.2%2024-06-13Fix
CVE-2024-5265WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-13Fix
CVE-2024-4696Lenovo Service Bridge OS command injection7.5CNA v3.10.4%2024-06-13Fix
CVE-2024-4615Elespare WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-13Fix
CVE-2024-4576TIBCO EBX file inclusion5.3v3.10.5%2024-06-13Fix
CVE-2024-4371CoDesigner WooCommerce Builder for Elementor WordPress plugin PHP object injection9.8v3.10.7%2024-06-13Fix
CVE-2024-4176Trellix EDR UI (XConsole) cross-site scripting4.1CNA v3.10.3%2024-06-13
CVE-2024-4149Floating Chat Widget WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2024-06-13Fix
CVE-2024-4145Search and Replace WordPress plugin Admin+ SQL injection7.2NVD v3.10.4%2024-06-13Fix
CVE-2024-3922Dokan Pro WordPress plugin unauthenticated SQL injection9.8v3.153.2%2024-06-13NucleiExploit codeFix
CVE-2024-3552Web Directory Free WordPress plugin unauthenticated SQL injection9.8NVD v3.167.1%2024-06-13NucleiFix
CVE-2024-3073Easy WP SMTP by SendLayer WordPress plugin exposure of sensitive information via the UI2.7CNA v3.10.3%2024-06-13Fix
CVE-2024-3032Themify Builder WordPress plugin open redirect6.1NVD v3.10.8%2024-06-13NucleiFix
CVE-2024-2762FooGallery WordPress plugin Author+ stored XSS5.4NVD v3.10.4%2024-06-13Fix
CVE-2024-2098Download Manager WordPress plugin improper authorization via protectMediaLibrary7.5CNA v3.10.5%2024-06-13Fix
CVE-2024-1565EmbedPress WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-13Fix
CVE-2024-0979Dashboard Widgets Suite WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-06-13Fix
CVE-2024-0103NVIDIA Triton Inference Server improper initialization5.4CNA v3.10.3%2024-06-13Fix
CVE-2024-0099NVIDIA vGPU software and Cloud Gaming CVE7.8CNA v3.10.2%2024-06-13Fix
CVE-2024-0095NVIDIA Triton Inference Server log injection4.3CNA v3.10.5%2024-06-13Fix
CVE-2024-0094NVIDIA vGPU software and Cloud Gaming CVE5.5CNA v3.10.2%2024-06-13Fix
CVE-2024-0093NVIDIA vGPU software and Cloud Gaming CVE6.5CNA v3.10.2%2024-06-13Fix
CVE-2024-0092NVIDIA GPU display driver denial of service5.5CNA v3.10.2%2024-06-13Fix
CVE-2024-0091NVIDIA GPU Display Driver untrusted pointer dereference7.8CNA v3.10.2%2024-06-13Fix
CVE-2024-0090NVIDIA GPU driver out-of-bounds write7.8CNA v3.10.3%2024-06-13Fix
CVE-2024-0089NVIDIA GPU Display Driver information disclosure7.8CNA v3.10.2%2024-06-13Fix
CVE-2024-0086NVIDIA vGPU software and Cloud Gaming CVE5.5CNA v3.10.2%2024-06-13Fix
CVE-2024-0085NVIDIA vGPU software and Cloud Gaming CVE6.3CNA v3.10.1%2024-06-13Fix
CVE-2024-0084NVIDIA vGPU software and Cloud Gaming CVE7.8CNA v3.10.2%2024-06-13Fix
CVE-2024-37878Twcms cross-site scripting6.1v3.10.4%2024-06-12
CVE-2024-37665Wvp-pro GB28181 improper access control8.8CISA ADP v3.10.5%2024-06-12
CVE-2024-37629SummerNote cross-site scripting6.1v3.10.5%2024-06-12
CVE-2024-37304NuGetGallery's Markdown Autolinks Processing vulnerable to cross-site scripting6.1CNA v3.10.7%2024-06-12Fix
CVE-2024-37300Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub8.1CNA v3.10.4%2024-06-12Fix
CVE-2024-37297WooCommerce has a cross-site scripting vulnerability in checkout and registration forms5.4CNA v3.10.5%2024-06-12Fix
CVE-2024-37040Schneider Electric Sage 1410 buffer overflow5.4CNA v3.10.4%2024-06-12Fix
CVE-2024-37039Schneider Electric Sage 1410 unchecked return value5.9CNA v3.10.8%2024-06-12Fix
CVE-2024-37038Schneider Electric Sage 1410 incorrect default permissions7.5CNA v3.10.4%2024-06-12Fix
CVE-2024-37037Schneider Electric Sage 1410 path traversal8.1CNA v3.11.0%2024-06-12Fix
CVE-2024-37036Schneider Electric Sage 1410 out-of-bounds write9.8CNA v3.10.5%2024-06-12Fix
CVE-2024-36856RMQTT Broker session management denial of service7.5CISA ADP v3.10.5%2024-06-12
CVE-2024-36840Boelter Blue System Management v.1.3 SQL injection9.1CISA ADP v3.12.2%2024-06-12Exploit code
CVE-2024-36761Gfx-rs Naga out-of-bounds write9.8v3.10.7%2024-06-12
CVE-2024-36691PPGo_Jobs AdminController AjaxSave method insecure inherited permissions6.3CISA ADP v3.10.3%2024-06-12
CVE-2024-36523Wvp-pro GB28181 improper access control6.5CISA ADP v3.10.3%2024-06-12
CVE-2024-36454Fsas Technologies IPCOM EX2 Series (V01L0x Series) uninitialized resource use5.3CISA ADP v3.10.5%2024-06-12
CVE-2024-36265Apache Submarine Server Core: Authorization bypass9.8v3.10.7%2024-06-12Fix
CVE-2024-36264Apache Submarine Commons Utils has a hard-coded secret9.8v3.11.0%2024-06-12Fix
CVE-2024-36263Apache Submarine Server Core: SQL injection8.1CISA ADP v3.11.0%2024-06-12Fix
CVE-2024-36103ELECOM WRC-X5400GS-B OS command injection6.8CISA ADP v3.10.7%2024-06-12
CVE-2024-34065@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass7.1CNA v3.10.7%2024-06-12Fix
CVE-2024-31881IBM Db2 denial of service6.5CNA v3.10.6%2024-06-12Fix
CVE-2024-31217@strapi/plugin-upload has a denial of service via improper exception handling5.3CNA v3.10.7%2024-06-12Fix
CVE-2024-29181@strapi/plugin-content-manager leaks data via relations via the Admin Panel2.3CNA v3.10.4%2024-06-12Fix
CVE-2024-28970Dell CPG BIOS out-of-bounds write4.7CNA v3.10.1%2024-06-12Fix
CVE-2024-28964Dell Common Event Enabler deserialization of untrusted data7.8CNA v3.10.4%2024-06-12Fix
CVE-2024-28762IBM Db2 denial of service5.3CNA v3.10.6%2024-06-12Fix
CVE-2024-25949Dell SmartFabric OS10 Software improper authorization8.8CNA v3.10.4%2024-06-12Fix
CVE-2024-24051Monoprice SELECT Mini 3D Printer V2 improper input validation5.5v3.10.2%2024-06-12
CVE-2024-23445Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions6.5CNA v3.10.5%2024-06-12Fix
CVE-2024-22855Itssglobal Imlog User Maintenance section of ITSS cross-site scripting5.4v3.10.3%2024-06-12
CVE-2024-5909Cortex XDR Agent: Local Windows User can Disable the Agent6.8CNA v4.00.4%2024-06-12Exploit codeFix
CVE-2024-5908GlobalProtect App: Encrypted credential exposure via Log files5.5CNA v4.00.4%2024-06-12Fix
CVE-2024-5907Cortex XDR Agent: Local privilege escalation (PE)5.2CNA v4.00.1%2024-06-12Fix
CVE-2024-5906Prisma Cloud Compute: Stored cross-site scripting (XSS) vulnerability in the Web interface4.8CNA v4.00.2%2024-06-12Fix
CVE-2024-5905Cortex XDR Agent: Local Windows User can Disrupt Functionality of the Agent2.0CNA v4.00.1%2024-06-12Fix
CVE-2024-5898itsourcecode Payroll Management System print_payroll.php SQL injection9.8v3.10.6%2024-06-12
CVE-2024-5897SourceCodester Employee and Visitor Gate Pass Logging System cross-site scripting6.1v3.10.6%2024-06-12
CVE-2024-5896SourceCodester Employee and Visitor Gate Pass Logging System save_users SQL injection9.8v3.10.7%2024-06-12
CVE-2024-5895SourceCodester Employee and Visitor Gate Pass Logging System delete_users SQL injection9.8v3.10.6%2024-06-12
CVE-2024-5894SourceCodester Online Eyewear Shop manage_product.php SQL injection9.8v3.10.6%2024-06-12
CVE-2024-5893SourceCodester Cab Management System SQL injection9.8v3.10.5%2024-06-12
CVE-2024-5892Divi Torque Lite Divi Theme and Extra WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-12Fix
CVE-2024-5891Quay: Unauthorized user may authenticate via oauth application token4.2CNA v3.10.2%2024-06-12
CVE-2024-5798Vault incorrectly Validated JSON Web Tokens (JWT) Audience Claims2.6CNA v3.10.3%2024-06-12Fix
CVE-2024-5759Tenable Security Center improper privilege management5.4CNA v3.10.3%2024-06-12Fix
CVE-2024-5742GNU Nano emergency save file privilege escalation6.7NVD v3.10.3%2024-06-12Fix
CVE-2024-5739LINE client cross-site scripting6.1CNA v3.10.3%2024-06-12Fix
CVE-2024-5674The Newsletter Team Newsletter API v1 and v2 addon missing authorization6.5CNA v3.10.3%2024-06-12Fix
CVE-2024-5560Schneider Electric Sage 1410 out-of-bounds read5.3CNA v3.10.9%2024-06-12Fix
CVE-2024-5559Schneider Electric PowerLogic P5 weak cryptographic algorithm6.1CNA v3.10.2%2024-06-12Fix
CVE-2024-5558Schneider Electric SpaceLogic AS-P time-of-check time-of-use race condition6.4CNA v3.10.1%2024-06-12Fix
CVE-2024-5557Schneider Electric SpaceLogic AS-P sensitive information in log files4.5CNA v3.10.2%2024-06-12Fix
CVE-2024-5553Premium Addons for Elementor WordPress plugin DOM-based stored cross-site scripting5.4v3.10.4%2024-06-12Fix
CVE-2024-5543Slideshow Gallery LITE WordPress plugin authenticated (Contributor+) SQL injection8.1CNA v3.10.5%2024-06-12Fix
CVE-2024-5468stylemix Pearl stm_hb_delete function missing authorization6.5CNA v3.10.4%2024-06-12Fix
CVE-2024-5313Schneider Electric EVlink Home Smart denial of service6.5CNA v3.10.4%2024-06-12Fix
CVE-2024-5266Download Manager WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-12Fix
CVE-2024-5211mintplex-labs/anything-llm path traversal7.2NVD v3.11.0%2024-06-12Fix
CVE-2024-5154Cri-o: Malicious container can create symlink on host8.1CNA v3.11.2%2024-06-12Fix
CVE-2024-5056Schneider Electric Modicon M340 files accessible to external parties6.5CNA v3.10.4%2024-06-12Fix
CVE-2024-4924Sassy Social Share Admin+ stored cross-site scripting6.1CISA ADP v3.10.5%2024-06-12Fix
CVE-2024-4898InstaWP Connect plugin REST API missing authorization9.8CNA v3.14.2%2024-06-12NucleiExploit codeFix
CVE-2024-4892BuddyPress WordPress plugin authenticated (Subscriber+) stored cross-site scripting5.4v3.10.4%2024-06-12Fix
CVE-2024-4845Icegram Express WordPress plugin SQL injection8.8CNA v3.10.5%2024-06-12Fix
CVE-2024-4564CoDesigner WooCommerce Builder for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-06-12Fix
CVE-2024-4315LFI vulnerability due to lack of Path Sanitization in parisneo/lollms9.1CNA v3.01.0%2024-06-12Fix
CVE-2024-4201Improper neutralization of input during web page generation (cross-site scripting) in GitLab4.4CNA v3.10.5%2024-06-12Fix
CVE-2024-3925Element Pack Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-12Fix
CVE-2024-3559Custom Field Suite WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-12
CVE-2024-3492Events Manager Calendar, Bookings, Tickets, and more! WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-12Fix
CVE-2024-3468Deserialization of untrusted data in AVEVA PI Web API8.4CNA v4.00.4%2024-06-12Fix
CVE-2024-3467Deserialization of untrusted data in AVEVA PI Asset Framework Client7.8v3.10.2%2024-06-12Fix
CVE-2024-3183FreeIPA Kerberos ticket encryption weak password hash8.1CNA v3.12.1%2024-06-12Exploit codeFix
CVE-2024-2747Schneider Electric Easergy Studio unquoted search path7.8CNA v3.10.2%2024-06-12Fix
CVE-2024-2698Red Hat FreeIPA Kerberos constrained delegation incorrect authorization8.8CNA v3.10.7%2024-06-12Fix
CVE-2024-2300HP Advance Mobile Application potential information disclosure6.2CISA ADP v3.10.2%2024-06-12
CVE-2024-2092Elementor Addon Elements WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-12Fix
CVE-2024-1963Uncontrolled resource consumption in GitLab6.5CNA v3.10.6%2024-06-12Fix
CVE-2024-1891Tenable Security Center stored cross-site scripting3.5CNA v3.10.3%2024-06-12Fix
CVE-2024-1766Download Manager WordPress plugin authenticated (Subscriber+) stored Self-based cross-site scripting5.4v3.10.3%2024-06-12Fix
CVE-2024-1736Uncontrolled resource consumption in GitLab6.5CNA v3.10.6%2024-06-12Fix
CVE-2024-1659Arbitrary file upload in MegaBIP9.8v3.10.7%2024-06-12Fix
CVE-2024-1577Remote code execution in MegaBIP9.8v3.11.1%2024-06-12Fix
CVE-2024-1576SQL injection in MegaBIP9.8v3.10.6%2024-06-12Fix
CVE-2024-1495Uncontrolled resource consumption in GitLab6.5CNA v3.10.6%2024-06-12Fix
CVE-2024-0865Schneider Electric EcoStruxure IT Gateway hard-coded credentials7.8CNA v3.10.2%2024-06-12Fix
CVE-2024-0427Arforms WordPress plugin reflected XSS6.3CISA ADP v3.10.4%2024-06-12Fix
CVE-2024-0160Dell CPG BIOS incorrect authorization6.8CNA v3.10.2%2024-06-12Fix
CVE-2024-37325Microsoft Azure Science Virtual Machine (DSVM) elevation of privilege8.1CNA v3.11.1%2024-06-11Fix
CVE-2024-37301document-merge-service vulnerable to remote code execution via server-side template injection7.2CNA v3.11.0%2024-06-11Fix
CVE-2024-37296Aimeos HTML client vulnerable to digital products download without proper payment status check5.3CNA v3.10.6%2024-06-11Fix
CVE-2024-37295Aimeos Core remote code execution in web server context7.2CNA v3.10.6%2024-06-11Fix
CVE-2024-37294Aimeos denial of service vulnerability in SaaS and marketplace setups5.5CNA v3.10.4%2024-06-11Fix
CVE-2024-37293Aws-deployment-framework's potential risk can lead to privilege escalation7.6CNA v3.10.2%2024-06-11Fix
CVE-2024-37178Cross-site scripting (XSS) vulnerabilities in SAP Financial Consolidation5.0CNA v3.10.3%2024-06-11Fix
CVE-2024-37177Cross-site scripting (XSS) vulnerabilities in SAP Financial Consolidation8.1CNA v3.10.4%2024-06-11Fix
CVE-2024-37176Missing authorization check in SAP Bw/4hana Transformation and DTP5.5CNA v3.10.3%2024-06-11Fix
CVE-2024-37161MeterSphere front-end editor stores XSS4.0CNA v3.10.4%2024-06-11Fix
CVE-2024-37130Dell OpenManage Server Administrator uncontrolled search path7.3CNA v3.10.2%2024-06-11Fix
CVE-2024-36821Linksys Velop WHW0101 insecure permissions6.8NVD v3.12.9%2024-06-11Fix
CVE-2024-36702MZ Automation libiec61850 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-06-11
CVE-2024-36650TOTOLINK A3100R buffer overflow7.5CISA ADP v3.10.6%2024-06-11
CVE-2024-36360Keisuke Nakayama awkblog OS command injection9.8CISA ADP v3.11.6%2024-06-11
CVE-2024-36266Siemens PowerSys improper authentication8.5CNA v4.00.2%2024-06-11Fix
CVE-2024-35716Copymatic WordPress plugin broken access control8.8v3.10.3%2024-06-11Fix
CVE-2024-35692GDPR/CCPA Cookie Consent Banner WordPress plugin broken access control7.3v3.10.3%2024-06-11Fix
CVE-2024-35685Radcliffe 2 WordPress theme broken access control5.3CNA v3.10.3%2024-06-11Fix
CVE-2024-35683Leyka WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-35671MJ Update History WordPress plugin broken access control4.3CNA v3.10.4%2024-06-11
CVE-2024-35667WP EasyCart WordPress plugin missing authorization5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-35665Insert Post Ads WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11
CVE-2024-35663WP Translate WordPress plugin broken access control5.4CNA v3.10.4%2024-06-11
CVE-2024-35628Photo Gallery by 10Web WordPress plugin broken access control4.3v3.10.3%2024-06-11Fix
CVE-2024-35303Siemens Tecnomatix Plant Simulation V2302 incorrect type conversion7.3CNA v4.00.3%2024-06-11Fix
CVE-2024-35292Siemens SIMATIC S7-200 SMART CPU CR40 insufficient randomness8.8CNA v4.00.4%2024-06-11
CVE-2024-35265Microsoft Windows Perception service elevation of privilege7.0CNA v3.10.4%2024-06-11Fix
CVE-2024-35263Microsoft Dynamics 365 (on-premises) information disclosure5.7CNA v3.11.7%2024-06-11Fix
CVE-2024-35255Azure Identity Libraries and Microsoft Authentication Library elevation of privilege5.5CNA v3.10.8%2024-06-11Fix
CVE-2024-35254Microsoft Azure Monitor Agent elevation of privilege7.1CNA v3.10.8%2024-06-11Fix
CVE-2024-35253Microsoft Azure File Sync elevation of privilege4.4CNA v3.10.7%2024-06-11Fix
CVE-2024-35252Microsoft Azure Storage Movement client Library denial of service7.5CNA v3.12.5%2024-06-11Fix
CVE-2024-35250Microsoft Windows Kernel-Mode driver untrusted pointer dereference7.8CNA v3.125.2%2024-06-11KEVExploit codeFix
CVE-2024-35249Microsoft Dynamics 365 Business Central remote code execution8.8CNA v3.13.4%2024-06-11Fix
CVE-2024-35248Microsoft Dynamics 365 Business Central elevation of privilege7.3CNA v3.11.0%2024-06-11Fix
CVE-2024-35235OpenPrinting cups Cupsd Listen arbitrary chmod 01407774.4CNA v3.12.4%2024-06-11Fix
CVE-2024-35225Jupyter Server Proxy has a reflected XSS issue in host parameter9.7CNA v3.10.4%2024-06-11Fix
CVE-2024-35213Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)9.0CNA v3.10.5%2024-06-11Fix
CVE-2024-35212Siemens SINEC Traffic Analyzer improper input validation6.9CNA v4.00.3%2024-06-11Fix
CVE-2024-35211Siemens SINEC Traffic Analyzer sensitive cookie without the Secure attribute6.8CNA v4.00.2%2024-06-11Fix
CVE-2024-35210Siemens SINEC Traffic Analyzer cleartext transmission of sensitive information5.1CNA v4.00.1%2024-06-11Fix
CVE-2024-35209Siemens SINEC Traffic Analyzer exposed dangerous method6.9CNA v4.00.3%2024-06-11Fix
CVE-2024-35208Siemens SINEC Traffic Analyzer insufficiently protected credentials4.8CNA v4.00.1%2024-06-11Fix
CVE-2024-35207Siemens SINEC Traffic Analyzer cross-site request forgery8.5CNA v4.00.2%2024-06-11Fix
CVE-2024-35206Siemens SINEC Traffic Analyzer insufficient session expiration8.5CNA v4.00.3%2024-06-11Fix
CVE-2024-35168WP Discourse WordPress plugin broken access control4.3CNA v3.10.4%2024-06-11Fix
CVE-2024-34826CF7 WOW Styler WordPress plugin broken access control6.3CNA v3.10.3%2024-06-11Fix
CVE-2024-34824SportsPress Sports Club and League Manager WordPress plugin broken access control6.3v3.10.2%2024-06-11Fix
CVE-2024-34822weMail WordPress plugin broken access control5.3v3.10.4%2024-06-11Fix
CVE-2024-34821Contact List WordPress plugin broken access control5.3v3.10.4%2024-06-11Fix
CVE-2024-34820If-So Dynamic Content Personalization WordPress plugin broken access control6.5CNA v3.10.4%2024-06-11Fix
CVE-2024-34819MC Woocommerce Wishlist WordPress plugin broken access control5.3v3.10.4%2024-06-11Fix
CVE-2024-34815Import and export users and customers WordPress plugin broken access control5.4CNA v3.10.4%2024-06-11Fix
CVE-2024-34813WooCommerce Wishlist WordPress plugin broken access control5.3CNA v3.10.3%2024-06-11Fix
CVE-2024-34804Tagembed WordPress plugin broken access control5.4CNA v3.10.4%2024-06-11Fix
CVE-2024-34799BookingPress WordPress plugin Appointment Duration manipulation vulnerability5.3v3.10.4%2024-06-11Fix
CVE-2024-34768Fastly WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-34763Builder for WooCommerce reviews shortcodes ReviewShort WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-34758FundEngine Donation and Crowdfunding Platform WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-34753Radio Player WordPress plugin broken access control5.3v3.10.3%2024-06-11Fix
CVE-2024-34691Missing authorization check in SAP S/4HANA (Manage Incoming Payment files)6.5CNA v3.10.3%2024-06-11Fix
CVE-2024-34690Missing authorization check in SAP Student Life Cycle Management (SLcM)5.4CNA v3.10.2%2024-06-11Fix
CVE-2024-34688Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)7.5CNA v3.10.5%2024-06-11Fix
CVE-2024-34686Cross-site scripting (XSS) vulnerability in SAP CRM (WebClient UI)6.1CNA v3.10.3%2024-06-11Fix
CVE-2024-34684Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform3.7CNA v3.10.1%2024-06-11Fix
CVE-2024-34683Unrestricted file upload in SAP Document Builder (HTTP service)6.5CNA v3.10.2%2024-06-11Fix
CVE-2024-34442weDocs WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-34406McAfee Security: Antivirus VPN deep link handler denial of service5.3CISA ADP v3.10.4%2024-06-11
CVE-2024-34405McAfee Security: Antivirus VPN deep link handler code injection9.1CISA ADP v3.10.5%2024-06-11
CVE-2024-33606MicroDicom DICOM Viewer improper authorization in handler for Custom URL Scheme8.8v3.10.5%2024-06-11Fix
CVE-2024-33500Siemens Mendix Applications using Mendix 10 improper privilege management7.4CNA v4.00.3%2024-06-11Fix
CVE-2024-33001Denial of service (DOS) in SAP NetWeaver and ABAP platform6.5CNA v3.10.4%2024-06-11Fix
CVE-2024-32148Pardot WordPress plugin broken access control4.3CNA v3.10.3%2024-06-11Fix
CVE-2024-32146Aspose.Words Import and Export word documents WordPress plugin broken access control4.3CNA v3.10.4%2024-06-11
CVE-2024-32144Welcart e-Commerce WordPress plugin broken access control4.3v3.10.3%2024-06-11Fix
CVE-2024-32143Podlove Podcast Publisher WordPress plugin broken access control8.8v3.10.4%2024-06-11Fix
CVE-2024-31495Fortinet FortiPortal SQL injection3.9CNA v3.10.5%2024-06-11Fix
CVE-2024-31404Cybozu Garoon information disclosure4.3CISA ADP v3.10.3%2024-06-11Fix
CVE-2024-31403Cybozu Garoon incorrect authorization5.4CISA ADP v3.10.3%2024-06-11Fix
CVE-2024-31402Cybozu Garoon incorrect authorization4.3v3.10.3%2024-06-11Fix
CVE-2024-31401Cybozu Garoon cross-site scripting9.0CISA ADP v3.10.5%2024-06-11Fix
CVE-2024-31400Cybozu Garoon information disclosure6.5CISA ADP v3.10.3%2024-06-11Fix
CVE-2024-31399Cybozu Garoon resource exhaustion6.5v3.10.4%2024-06-11Fix
CVE-2024-31398Cybozu Garoon information disclosure4.3v3.10.3%2024-06-11Fix
CVE-2024-31397Cybozu Garoon denial of service4.9CISA ADP v3.10.5%2024-06-11Fix
CVE-2024-30104Microsoft Office remote code execution7.8CNA v3.11.5%2024-06-11Fix
CVE-2024-30103Microsoft Outlook remote code execution8.8CNA v3.13.4%2024-06-11Fix
CVE-2024-30102Microsoft Office remote code execution7.3CNA v3.10.8%2024-06-11Fix
CVE-2024-30101Microsoft Office remote code execution7.5CNA v3.11.8%2024-06-11Fix
CVE-2024-30100Microsoft SharePoint server remote code execution7.8CNA v3.11.2%2024-06-11Fix
CVE-2024-30099Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.5%2024-06-11Fix
CVE-2024-30097Microsoft Speech Application Programming Interface (SAPI) remote code execution8.8CNA v3.11.7%2024-06-11Fix
CVE-2024-30096Microsoft Windows Cryptographic services information disclosure5.5CNA v3.11.0%2024-06-11Fix
CVE-2024-30095Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.8CNA v3.11.0%2024-06-11Fix
CVE-2024-30094Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.8CNA v3.10.9%2024-06-11Fix
CVE-2024-30093Microsoft Windows Storage elevation of privilege7.3CNA v3.11.1%2024-06-11Fix
CVE-2024-30091Microsoft Windows win32k elevation of privilege7.8CNA v3.14.3%2024-06-11Fix
CVE-2024-30090Microsoft Streaming service elevation of privilege7.0CNA v3.12.0%2024-06-11Exploit codeFix
CVE-2024-30089Microsoft Streaming service elevation of privilege7.8CNA v3.18.1%2024-06-11Fix
CVE-2024-30088Microsoft Windows Kernel TOCTOU race condition7.0CNA v3.168.2%2024-06-11KEVExploit codeFix
CVE-2024-30087Microsoft Windows win32k elevation of privilege7.8CNA v3.19.5%2024-06-11Fix
CVE-2024-30086Microsoft Windows Win32 Kernel subsystem elevation of privilege7.8CNA v3.11.1%2024-06-11Fix
CVE-2024-30085Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.114.3%2024-06-11Exploit codeFix
CVE-2024-30084Microsoft Windows Kernel-Mode driver elevation of privilege7.0CNA v3.15.9%2024-06-11Fix
CVE-2024-30083Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.5%2024-06-11Fix
CVE-2024-30082Microsoft Windows win32k elevation of privilege7.8CNA v3.11.3%2024-06-11Fix
CVE-2024-30080Microsoft Message Queuing (MSMQ) remote code execution9.8CNA v3.143.1%2024-06-11Fix
CVE-2024-30078Microsoft Windows Wi-Fi driver remote code execution8.8CNA v3.15.2%2024-06-11Fix
CVE-2024-30077Microsoft Windows OLE remote code execution8.0CNA v3.11.8%2024-06-11Fix
CVE-2024-30076Microsoft Windows Container Manager service elevation of privilege6.8CNA v3.11.7%2024-06-11Fix
CVE-2024-30075Microsoft Windows Link Layer Topology Discovery protocol remote code execution8.0CNA v3.10.9%2024-06-11Fix
CVE-2024-30074Microsoft Windows Link Layer Topology Discovery protocol remote code execution8.0CNA v3.11.2%2024-06-11Fix
CVE-2024-30072Microsoft Event Trace Log File Parsing remote code execution7.8CNA v3.10.9%2024-06-11Fix
CVE-2024-30070Microsoft Windows DHCP server service denial of service7.5CNA v3.12.3%2024-06-11Fix
CVE-2024-30069Microsoft Windows Remote Access Connection Manager information disclosure4.7CNA v3.10.6%2024-06-11Fix
CVE-2024-30068Microsoft Windows Kernel elevation of privilege8.8CNA v3.10.8%2024-06-11Fix
CVE-2024-30067Microsoft Windows winlogon elevation of privilege5.5CNA v3.10.6%2024-06-11Fix
CVE-2024-30066Microsoft Windows winlogon elevation of privilege5.5CNA v3.10.6%2024-06-11Fix
CVE-2024-30065Microsoft Windows Themes denial of service5.5CNA v3.10.8%2024-06-11Fix
CVE-2024-30064Microsoft Windows Kernel elevation of privilege8.8CNA v3.10.8%2024-06-11Fix
CVE-2024-30063Microsoft Windows Distributed File System (DFS) remote code execution6.7CNA v3.11.0%2024-06-11Fix
CVE-2024-30062Microsoft Windows Standards-Based Storage Management service remote code execution7.8CNA v3.11.0%2024-06-11Fix
CVE-2024-30052Visual Studio remote code execution4.7CNA v3.11.4%2024-06-11Exploit codeFix
CVE-2024-29855Veeam Recovery Orchestrator hard-coded credentials9.0CNA v3.021.6%2024-06-11Exploit codeFix
CVE-2024-29060Visual Studio elevation of privilege6.7CNA v3.10.9%2024-06-11Fix
CVE-2024-28877MicroDicom DICOM Viewer stack-based buffer overflow8.8v3.10.7%2024-06-11Fix
CVE-2024-28164Information disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)5.3CNA v3.10.3%2024-06-11Fix
CVE-2024-28024Hitachi Energy FOXMAN-UN cleartext storage of sensitive information4.1CNA v3.10.1%2024-06-11
CVE-2024-28023Hitachi Energy FOXMAN-UN hard-coded password5.7CNA v3.10.2%2024-06-11Fix
CVE-2024-28022Hitachi Energy UNEM missing brute-force protection6.5CNA v3.10.4%2024-06-11
CVE-2024-28021Hitachi Energy FOXMAN-UN improper certificate validation7.4CNA v3.10.3%2024-06-11Fix
CVE-2024-28020Hitachi Energy FOXMAN-UN incorrect user management8.0CNA v3.10.4%2024-06-11
CVE-2024-26330An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it.6.5CISA ADP v3.10.6%2024-06-11
CVE-2024-26010Fortinet FortiOS A stack-based buffer overflow6.7CNA v3.10.8%2024-06-11Fix
CVE-2024-24704Load More Anything WordPress plugin broken access control6.3v3.10.3%2024-06-11Fix
CVE-2024-24703MultiVendorX WordPress plugin broken access control8.6CNA v3.10.4%2024-06-11Fix
CVE-2024-23521Happyforms WordPress plugin broken access control5.3v3.10.4%2024-06-11Fix
CVE-2024-23518ACF Photo Gallery Field WordPress plugin broken access control4.3CNA v3.10.4%2024-06-11Fix
CVE-2024-23503Ninja Tables WordPress plugin broken access control4.3v3.10.3%2024-06-11Fix
CVE-2024-23111Fortinet FortiOS cross-site scripting6.2CNA v3.11.0%2024-06-11Fix
CVE-2024-23110Fortinet FortiOS A stack-based buffer overflow7.4CNA v3.10.3%2024-06-11Fix
CVE-2024-22261SQL injection in Harbor scan log API2.7CNA v3.10.4%2024-06-11Fix
CVE-2024-21754Fortinet FortiProxy weak password hash1.7CNA v3.13.5%2024-06-11Exploit codeFix
CVE-2024-5851playSMS SMS Schedule cross-site scripting5.3CNA v4.00.4%2024-06-11
CVE-2024-5847Google Chrome PDFium use-after-free8.8v3.10.5%2024-06-11Fix
CVE-2024-5846Google Chrome PDFium use-after-free8.8v3.10.5%2024-06-11Fix
CVE-2024-5845Google Chrome Audio use-after-free8.8v3.10.5%2024-06-11Fix
CVE-2024-5844Google Chrome Tab Strip heap-based buffer overflow8.8v3.10.5%2024-06-11Fix
CVE-2024-5843Google Chrome Downloads inappropriate implementation6.5NVD v3.10.5%2024-06-11Fix
CVE-2024-5842Google Chrome Browser UI use-after-free8.8v3.10.5%2024-06-11Fix
CVE-2024-5841Google Chrome V8 use-after-free8.8v3.15.0%2024-06-11Fix
CVE-2024-5840Google Chrome improper access control6.5v3.10.4%2024-06-11Fix
CVE-2024-5839Google Chrome Memory Allocator inappropriate implementation6.5NVD v3.10.5%2024-06-11Fix
CVE-2024-5838Google Chrome V8 type confusion8.8v3.10.5%2024-06-11Fix
CVE-2024-5837Google Chrome V8 type confusion8.8v3.10.5%2024-06-11Fix
CVE-2024-5836Google Chrome DevTools inappropriate implementation8.8v3.10.5%2024-06-11Fix
CVE-2024-5835Google Chrome Tab Groups heap-based buffer overflow8.8v3.10.5%2024-06-11Fix
CVE-2024-5834Google Chrome Dawn inappropriate implementation8.8v3.10.6%2024-06-11Fix
CVE-2024-5833Google Chrome V8 type confusion8.8v3.10.5%2024-06-11Fix
CVE-2024-5832Google Chrome Dawn use-after-free8.8v3.10.5%2024-06-11Fix
CVE-2024-5831Google Chrome Dawn use-after-free8.8v3.10.5%2024-06-11Fix
CVE-2024-5830Google Chrome V8 type confusion8.8v3.10.9%2024-06-11Fix
CVE-2024-5829smallweigit Avue avueUeditor cross-site scripting5.3CNA v4.00.3%2024-06-11
CVE-2024-5813SSH Private key leak in BeyondInsight PasswordSafe5.9CNA v3.10.4%2024-06-11Fix
CVE-2024-5812Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe3.3CNA v3.10.3%2024-06-11Fix
CVE-2024-5702Mozilla Firefox networking stack memory corruption7.5CISA ADP v3.10.9%2024-06-11Fix
CVE-2024-5701Mozilla Firefox memory safety bugs9.8CISA ADP v3.10.6%2024-06-11Fix
CVE-2024-5700Mozilla Firefox memory safety bugs7.0CISA ADP v3.10.4%2024-06-11Fix
CVE-2024-5699Mozilla Firefox case sensitivity bypass9.8CISA ADP v3.10.8%2024-06-11Fix
CVE-2024-5698Mozilla Firefox clickjacking6.1v3.10.4%2024-06-11Fix
CVE-2024-5697Mozilla Firefox observable discrepancy4.3v3.10.4%2024-06-11Fix
CVE-2024-5696Mozilla Firefox out-of-bounds write8.6CISA ADP v3.10.8%2024-06-11Fix
CVE-2024-5695Mozilla Firefox out-of-bounds write9.8v3.10.6%2024-06-11Fix
CVE-2024-5694Mozilla Firefox use-after-free7.5v3.10.5%2024-06-11Fix
CVE-2024-5693Mozilla Firefox inclusion of untrusted functionality6.1CISA ADP v3.10.6%2024-06-11Fix
CVE-2024-5692Mozilla Firefox, Firefox ESR and Thunderbird Save As dialog vulnerability6.5CISA ADP v3.10.6%2024-06-11Fix
CVE-2024-5691Mozilla Firefox protection mechanism failure4.7v3.10.7%2024-06-11Fix
CVE-2024-5690Mozilla Firefox observable discrepancy4.3v3.10.7%2024-06-11Fix
CVE-2024-5689Mozilla Firefox Screenshots feature vulnerability4.3v3.10.4%2024-06-11Fix
CVE-2024-5688Mozilla Firefox use-after-free8.1CISA ADP v3.11.1%2024-06-11Fix
CVE-2024-5687Mozilla Firefox improper access control5.3CISA ADP v3.10.4%2024-06-11Fix
CVE-2024-5646Futurio Extra WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-11Fix
CVE-2024-5584WordPress Online Booking and Scheduling Plugin Bookly stored cross-site scripting6.4CNA v3.10.3%2024-06-11Fix
CVE-2024-5531Ocean Extra WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-11Fix
CVE-2024-5530ShopLentor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-11Fix
CVE-2024-5189Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-06-11Fix
CVE-2024-5090SiteOrigin Widgets Bundle WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-11Fix
CVE-2024-4669Events Addon for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-11Fix
CVE-2024-4319Advanced Contact form 7 DB WordPress plugin unauthorized access5.3CNA v3.10.5%2024-06-11Fix
CVE-2024-4266MetForm WordPress plugin information disclosure7.5v3.10.5%2024-06-11Fix
CVE-2024-4190OpenText ArcSight Logger stored XSS8.4CNA v4.00.3%2024-06-11Fix
CVE-2024-3723Advanced Contact form 7 DB WordPress plugin sensitive information exposure5.3CNA v3.10.4%2024-06-11Fix
CVE-2024-3549Blog2Social: Social Media Auto Post and Scheduler WordPress plugin SQL injection9.9CNA v3.10.5%2024-06-11Fix
CVE-2024-2473WPS Hide Login WordPress plugin login page disclosure5.3CNA v3.11.2%2024-06-11Reported exploitedNucleiFix
CVE-2024-2462Hitachi Energy FOXMAN-UN improper certificate host validation6.8CNA v4.00.2%2024-06-11Fix
CVE-2024-2461Hitachi Energy FOX61x relative path traversal6.9CNA v4.00.5%2024-06-11Fix
CVE-2024-2013Hitachi Energy FOXMAN-UN authentication bypass10.0CNA v3.10.7%2024-06-11Fix
CVE-2024-2012Hitachi Energy FOXMAN-UN authentication bypass9.1CNA v3.10.6%2024-06-11Fix
CVE-2024-2011Hitachi Energy FOXMAN-UN heap-based buffer overflow8.6CNA v3.10.5%2024-06-11Fix
CVE-2024-0653Custom Field Template WordPress plugin authenticated (Admin+) stored Cross-Site Scritping4.8v3.10.2%2024-06-11Fix
CVE-2024-0627Custom Field Template WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-11Fix
CVE-2024-37880Pq-crystals Kyber observable discrepancy7.5v3.10.7%2024-06-10
CVE-2024-37393SecurEnvoy Multi-factor Authentication Solutions cleartext transmission of sensitive information7.5NVD v3.13.3%2024-06-10Nuclei
CVE-2024-37289Trend Micro Apex One An improper access control7.8CNA v3.10.6%2024-06-10Fix
CVE-2024-37169@jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapper5.3CNA v3.10.5%2024-06-10Fix
CVE-2024-37168@grpc/grpc-js can allocate memory for incoming messages well above configured limits5.3CNA v3.10.7%2024-06-10Fix
CVE-2024-37166ghtml cross-site scripting (XSS)8.9CNA v3.10.4%2024-06-10Fix
CVE-2024-37051JetBrains IntelliJ IDEA insufficiently protected credentials9.3CNA v3.14.9%2024-06-10Exploit codeFix
CVE-2024-37014Langflow remote code execution9.8v3.163.0%2024-06-10Reported exploitedNucleiFix
CVE-2024-36972Linux kernel af_unix null pointer dereference7.8CNA v3.10.5%2024-06-10Fix
CVE-2024-36971Android Kernel remote code execution7.8CNA v3.12.7%2024-06-10KEVExploit codeFix
CVE-2024-36531nukeviet code injection5.7CISA ADP v3.10.4%2024-06-10
CVE-2024-36528NukeViet deserialization of untrusted data8.8CISA ADP v3.10.8%2024-06-10
CVE-2024-36473Trend Micro VPN Proxy One Pro external control of a file path5.3CNA v3.10.2%2024-06-10Fix
CVE-2024-36471Apache Allura: Sensitive information exposure via DNS rebinding7.5CISA ADP v3.10.8%2024-06-10Fix
CVE-2024-36419SuiteCRM-Core host header injection in /legacy4.3CNA v3.10.2%2024-06-10Fix
CVE-2024-36418SuiteCRM authenticated RCE using connectors8.6CNA v3.10.8%2024-06-10Fix
CVE-2024-36417SuiteCRM stored XSS vulnerability allows code execution via Malicious iFrame5.7CNA v3.10.4%2024-06-10Fix
CVE-2024-36416SuiteCRM v4 API Excessive log data DOS8.6CNA v3.12.0%2024-06-10Exploit codeFix
CVE-2024-36415SalesAgility SuiteCRM file upload verification remote code execution9.1CNA v3.10.9%2024-06-10Fix
CVE-2024-36414SuiteCRM authenticated server-side request forgery7.7CNA v3.10.4%2024-06-10Fix
CVE-2024-36413SuiteCRM authenticated reflected cross-site scripting8.9CNA v3.10.3%2024-06-10Fix
CVE-2024-36412SuiteCRM unauthenticated SQL injection10.0CNA v3.15.7%2024-06-10Reported exploitedNucleiFix
CVE-2024-36411SuiteCRM authenticated SQL injection in EmailUIAjax displayView controller9.6CNA v3.10.4%2024-06-10Fix
CVE-2024-36410SuiteCRM authenticated SQL injection in EmailUIAjax messages count controller9.6CNA v3.10.4%2024-06-10Fix
CVE-2024-36409SuiteCRM authenticated SQL injection in TreeData entrypoint9.6CNA v3.10.4%2024-06-10Fix
CVE-2024-36408SuiteCRM authenticated SQL injection in Alerts9.6CNA v3.10.5%2024-06-10Fix
CVE-2024-36407SuiteCRM unauthenticated user password reset on php73.7CNA v3.10.3%2024-06-10Fix
CVE-2024-36406SalesAgility SuiteCRM open redirect5.4CNA v3.10.3%2024-06-10Fix
CVE-2024-36405Open Quantum Safe liboqs Kyber reference implementation timing side channel5.9CNA v3.10.5%2024-06-10Fix
CVE-2024-36359Trend Micro InterScan Web Security Virtual Appliance cross-site scripting5.4CNA v3.10.4%2024-06-10Fix
CVE-2024-36358Trend Micro Deep Security Agent link following7.8CNA v3.10.5%2024-06-10Fix
CVE-2024-36307Trend Micro Apex One security agent link following4.7CNA v3.10.8%2024-06-10Fix
CVE-2024-36306Trend Micro Apex One link following6.1CNA v3.10.6%2024-06-10Fix
CVE-2024-36305Trend Micro Apex One security agent link following7.8CNA v3.10.9%2024-06-10Fix
CVE-2024-36304Trend Micro Apex One time-of-check time-of-use race condition7.8CNA v3.10.4%2024-06-10Fix
CVE-2024-36303Trend Micro Apex One origin validation error7.8CNA v3.10.4%2024-06-10Fix
CVE-2024-36302Trend Micro Apex One origin validation error7.8CNA v3.10.6%2024-06-10Fix
CVE-2024-35754Ovic Importer WordPress plugin arbitrary file download6.5NVD v3.10.5%2024-06-10Fix
CVE-2024-35749Under Construction / Maintenance Mode from Acurax WordPress plugin IP bypass vulnerability5.3v3.10.3%2024-06-10
CVE-2024-35747Contact Form Builder, Contact Widget WordPress plugin bypass vulnerability vulnerability5.3v3.10.4%2024-06-10
CVE-2024-35746BuddyPress Cover WordPress plugin arbitrary file upload9.8v3.10.5%2024-06-10
CVE-2024-35745Strategery Migrations WordPress plugin arbitrary file deletion7.5v3.10.6%2024-06-10
CVE-2024-35744Upunzipper WordPress plugin arbitrary file deletion6.5NVD v3.10.6%2024-06-10
CVE-2024-35743SC filechecker WordPress plugin arbitrary file deletion6.5NVD v3.10.6%2024-06-10
CVE-2024-35742Easy Forms for Mailchimp WordPress plugin broken access control7.3v3.10.3%2024-06-10
CVE-2024-35741Awesome Support WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-35735WP Time Slots Booking Form WordPress plugin broken access control9.8v3.10.4%2024-06-10Fix
CVE-2024-35729Tickera WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-35728Product Addons and Fields for WooCommerce WordPress plugin content injection5.3v3.10.3%2024-06-10Fix
CVE-2024-35727Extra Product Options for WooCommerce WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-35726WooBuddy WordPress plugin broken access control8.8v3.10.4%2024-06-10Fix
CVE-2024-35725LA-Studio Element Kit for Elementor WordPress plugin broken access control8.8v3.10.4%2024-06-10Fix
CVE-2024-35724Bosa Elementor Addons and Templates for WooCommerce WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-35723Dashboard To-Do List WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-35722Slider Responsive Slideshow Image slider, Gallery slideshow WordPress plugin broken access control8.8v3.10.4%2024-06-10Fix
CVE-2024-35721Image Gallery WordPress plugin broken access control8.8v3.10.4%2024-06-10Fix
CVE-2024-35720Album Gallery WordPress Gallery plugin broken access control8.8v3.10.4%2024-06-10Fix
CVE-2024-35717Media Slider WordPress plugin broken access control8.8v3.10.4%2024-06-10Fix
CVE-2024-35712Database Cleaner: Clean, Optimize and Repair WordPress plugin arbitrary file read4.9v3.10.6%2024-06-10Fix
CVE-2024-35680YITH WooCommerce Product Add-Ons WordPress plugin content injection5.3v3.10.3%2024-06-10Fix
CVE-2024-35677MegaMenu WordPress plugin unauthenticated local file inclusion9.8v3.10.5%2024-06-10Fix
CVE-2024-35658Checkout Field Editor for WooCommerce (Pro) WordPress plugin unauthenticated arbitrary file deletion9.1v3.10.6%2024-06-10Fix
CVE-2024-35650MelaPress Login Security WordPress plugin remote file inclusion7.2v3.10.6%2024-06-10Fix
CVE-2024-35474iceice666 ResourcePack Server path traversal6.5CNA v3.10.9%2024-06-10
CVE-2024-35307Pandora FMS argument injection leading to remote code execution in Realtime Graph extension9.4CNA v4.00.9%2024-06-10Fix
CVE-2024-35306Pandora FMS OS command injection in Ajax PHP files through HTTP request8.7CNA v4.00.9%2024-06-10Fix
CVE-2024-35305Pandora FMS Unauth Time-based SQL injection via API8.9CNA v4.00.4%2024-06-10Fix
CVE-2024-35304Pandora FMS system command injection through Netflow function9.3CNA v4.01.1%2024-06-10Fix
CVE-2024-35242Composer vulnerable to command injection via malicious git/hg branch names8.8CNA v3.13.3%2024-06-10Exploit codeFix
CVE-2024-35241Composer vulnerable to command injection via malicious git branch name8.8CNA v3.11.1%2024-06-10Fix
CVE-2024-34800Crafthemes Demo Import WordPress plugin arbitrary plugin installation vulnerability7.6CNA v3.10.3%2024-06-10Fix
CVE-2024-34762Advanced Custom Fields Pro WordPress plugin Contributor+ local file inclusion9.9CNA v3.10.6%2024-06-10Fix
CVE-2024-34761Advanced Custom Fields Pro WordPress plugin Contributor+ arbitrary function execution vulnerability8.5CNA v3.10.4%2024-06-10Fix
CVE-2024-34332SiSoftware SANDRA kernel driver privilege escalation7.8CISA ADP v3.10.2%2024-06-10
CVE-2024-33850Pexip Infinity improper access control4.3CISA ADP v3.10.2%2024-06-10
CVE-2024-32849Trend Micro Maximum Security (Consumer) improper privilege management7.8CNA v3.10.3%2024-06-10Fix
CVE-2024-32167oretnom23 Online Medicine Ordering System arbitrary file deletion9.1v3.10.7%2024-06-10
CVE-2024-31613Bosscms cross-site request forgery5.4CISA ADP v3.10.2%2024-06-10
CVE-2024-31612emlog cross-site request forgery6.5v3.10.2%2024-06-10
CVE-2024-31611Seacms improper resource release9.1v3.10.6%2024-06-10
CVE-2024-28833Checkmk missing brute-force protection for two factor authentication5.9CNA v3.10.4%2024-06-10Fix
CVE-2024-27885Apple macOS link following6.3v3.10.3%2024-06-10Fix
CVE-2024-27857Apple macOS code injection7.8v3.11.8%2024-06-10Fix
CVE-2024-27855Apple macOS improper access control8.8v3.10.7%2024-06-10Fix
CVE-2024-27851Apple Safari arbitrary code execution8.8v3.10.8%2024-06-10Fix
CVE-2024-27850Apple Safari personal information exposure6.5v3.10.7%2024-06-10Fix
CVE-2024-27848Apple macOS insecure inherited permissions7.8v3.10.2%2024-06-10Fix
CVE-2024-27845Apple iOS and iPadOS Notes attachments handling vulnerability3.3v3.10.2%2024-06-10Fix
CVE-2024-27844Apple Safari permission dialog vulnerability5.5NVD v3.10.6%2024-06-10Fix
CVE-2024-27840Apple macOS buffer underflow6.3NVD v3.10.3%2024-06-10Fix
CVE-2024-27838Apple Safari cross-site scripting6.5v3.10.7%2024-06-10Fix
CVE-2024-27836Apple macOS out-of-bounds write7.8v3.10.4%2024-06-10Fix
CVE-2024-27833Apple Safari integer overflow8.8v3.10.8%2024-06-10Fix
CVE-2024-27832Apple macOS privilege escalation7.8NVD v3.10.6%2024-06-10Fix
CVE-2024-27831Apple macOS buffer underflow7.8v3.10.3%2024-06-10Fix
CVE-2024-27830Apple Safari state management vulnerability6.5v3.10.7%2024-06-10Fix
CVE-2024-27828Apple tvOS buffer underflow7.8v3.10.3%2024-06-10Fix
CVE-2024-27820Apple Safari arbitrary code execution8.8v3.11.0%2024-06-10Fix
CVE-2024-27819Apple iOS and iPadOS improper access control2.4v3.10.3%2024-06-10Fix
CVE-2024-27817Apple macOS missing integrity check7.8v3.10.2%2024-06-10Fix
CVE-2024-27815Apple macOS out-of-bounds write7.8v3.12.0%2024-06-10Exploit codeFix
CVE-2024-27814Apple watchOS information disclosure2.4v3.10.3%2024-06-10Fix
CVE-2024-27812Apple visionOS logic flaw6.5NVD v3.11.1%2024-06-10Fix
CVE-2024-27811Apple macOS improper privilege management7.8NVD v3.10.6%2024-06-10Fix
CVE-2024-27808Apple Safari buffer underflow8.8v3.11.2%2024-06-10Fix
CVE-2024-27807Apple iOS and iPadOS App Privacy Report logging vulnerability4.3v3.10.5%2024-06-10Fix
CVE-2024-27806Apple macOS information disclosure5.5v3.10.3%2024-06-10Fix
CVE-2024-27805Apple macOS information disclosure5.5v3.10.2%2024-06-10Fix
CVE-2024-27802Apple macOS out-of-bounds read7.8v3.10.4%2024-06-10Fix
CVE-2024-27801Apple macOS privilege escalation7.8v3.10.4%2024-06-10Fix
CVE-2024-27800Apple macOS denial of service6.5NVD v3.10.6%2024-06-10Fix
CVE-2024-27799Apple iOS, iPadOS and macOS entitlement checks vulnerability3.3v3.10.2%2024-06-10Fix
CVE-2024-27792Apple macOS improper access control5.5v3.10.2%2024-06-10Fix
CVE-2024-26507An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components.7.8CISA ADP v3.10.2%2024-06-10
CVE-2024-23524PilotPress WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-23299Apple macOS execution with unnecessary privileges8.6v3.10.2%2024-06-10Fix
CVE-2024-23282Apple macOS files accessible to external parties5.5v3.10.2%2024-06-10Fix
CVE-2024-23251Apple macOS improper authentication4.6v3.10.4%2024-06-10Fix
CVE-2024-22298Amelia WordPress plugin broken access control9.8v3.10.4%2024-06-10Fix
CVE-2024-2229612 Step Meeting List WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-22279Cloud Foundry Routing Release GoRouter denial of service Attack5.9CNA v3.10.4%2024-06-10Fix
CVE-2024-22244Harbor open redirect URL4.3CNA v3.10.4%2024-06-10Fix
CVE-2024-21751RabbitLoader WordPress plugin broken access control8.8v3.10.3%2024-06-10Fix
CVE-2024-5786Cross-site request forgery vulnerability in Comtrend router6.5CNA v3.10.2%2024-06-10
CVE-2024-5785Command injection vulnerability in Comtrend router8.0CNA v3.10.9%2024-06-10
CVE-2024-5597Fuji Electric Monitouch V-SFT type confusion9.8v3.10.5%2024-06-10Fix
CVE-2024-5102Elevation of Privelage via symlinked file in Avast Antivirus7.0v3.10.2%2024-06-10
CVE-2024-4746Netgsm WordPress plugin broken access control + CSRF6.3v3.10.3%2024-06-10Fix
CVE-2024-4745Giveaways and Contests by RafflePress WordPress plugin broken access control6.3v3.10.3%2024-06-10Fix
CVE-2024-4744iPages Flipbook WordPress plugin broken access control7.3v3.10.3%2024-06-10Fix
CVE-2024-4403CSRF in restart_program in parisneo/lollms-webui8.8v3.10.2%2024-06-10
CVE-2024-4328CSRF in clear_personality_files_list in parisneo/lollms-webui8.1v3.10.2%2024-06-10
CVE-2024-3850Uniview NVR301-04S2-P4 cross-site scripting5.4v3.10.9%2024-06-10NucleiFix
CVE-2024-3700Hard-coded password in Estomed Sp. z o.o. Simple Care software9.8v3.10.4%2024-06-10
CVE-2024-3699Hard-coded password in drEryk Gabinet9.8v3.10.4%2024-06-10Fix
CVE-2024-1228Hard-coded password in Eurosoft Przychodnia9.8v3.10.4%2024-06-10Fix
CVE-2024-37570Mitel 6869i SIP command injection8.8v3.11.1%2024-06-09
CVE-2024-37569Mitel 6869i SIP command injection8.8v3.13.2%2024-06-09
CVE-2024-37568Authlib has algorithm confusion with asymmetric public keys7.5v3.10.4%2024-06-09Fix
CVE-2024-37535GNOME VTE window resize escape sequence handling denial of service4.4CISA ADP v3.10.2%2024-06-09Fix
CVE-2024-35748WooCommerce Dropshipping WordPress plugin unauthenticated arbitrary email Sending vulnerability5.3v3.10.3%2024-06-09
CVE-2024-35669Debug Log Manager WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-35662Simple COD Fees for WooCommerce WordPress plugin broken access control8.8v3.10.4%2024-06-09
CVE-2024-35661Upload Fields for WPForms WordPress plugin broken access control9.8v3.10.4%2024-06-09
CVE-2024-35660Master Addons for Elementor WordPress plugin broken access control on API9.8v3.10.4%2024-06-09Fix
CVE-2024-34802AdFoxly WordPress plugin broken access control9.8v3.10.3%2024-06-09
CVE-2024-34435Aiomatic WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-33572Nexter Blocks WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-33565UkrSolution Barcode Scanner with Inventory and Order Manager missing authorization7.5NVD v3.10.4%2024-06-09Fix
CVE-2024-33564XStore WordPress theme arbitrary option update vulnerability4.3NVD v3.10.3%2024-06-09Fix
CVE-2024-33563XStore WordPress theme broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-33561XStore WordPress theme unauthenticated broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-33555XStore Core WordPress plugin Multiple authenticated broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-33547WZone WordPress plugin site Wide broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-33545WZone WordPress plugin unauthenticated broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-33543WP Time Slots Booking Form WordPress plugin broken access control7.5v3.10.4%2024-06-09Fix
CVE-2024-32824Evergreen Content Poster WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-32821Total Poll Lite WordPress plugin broken access control4.3CNA v3.10.4%2024-06-09Fix
CVE-2024-32820Social Share Pro Social Share Icons and Social Share Buttons missing authorization5.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32818MDTF Meta Data and Taxonomies Filter WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-32814Advanced Local Pickup for WooCommerce WordPress plugin broken access control5.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32813Integrate Google Drive WordPress plugin broken access control5.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32811USPS Shipping for WooCommerce Live Rates WordPress plugin sensitive data exposure via Log file5.3CNA v3.10.4%2024-06-09Fix
CVE-2024-32805Social Snap WordPress plugin broken access control6.5CNA v3.10.4%2024-06-09Fix
CVE-2024-32804WP GoToWebinar WordPress plugin broken access control4.3CNA v3.10.4%2024-06-09Fix
CVE-2024-32799Easy Property Listings WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-32798WP Travel Engine WordPress plugin Price manipulation vulnerability5.3NVD v3.10.3%2024-06-09Fix
CVE-2024-32797WP LinkedIn Auto Publish WordPress plugin broken access control5.4CNA v3.10.3%2024-06-09Fix
CVE-2024-32792Hummingbird WordPress plugin broken access control5.3v3.10.3%2024-06-09Fix
CVE-2024-32787Secure Copy Content Protection and Content Locking WordPress plugin broken access control4.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32784CookieHub WordPress plugin broken access control4.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32783Advanced Testimonial Carousel for Elementor WordPress plugin broken access control4.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32779Vision Image Map Builder WordPress plugin broken access control5.3CNA v3.10.3%2024-06-09Fix